3Nvz

**Name of the Vulnerable Software and Affected Versions** GitLab EE versions 19.1 through 19.1.6 GitLab EE versions 19.2 through 19.2.4 GitLab EE versions 19.3 through 19.3.0 **Description** An issue exists where an authenticated user with developer-role permissions can influence the execution environment of Pipeline Execution Policy enforcement jobs. This occurs due to improper handling of job dependencies. **Recommendations** Update GitLab EE version 19.1 to 19.1.7. Update GitLab EE version 19.2 to 19.2.5. Update GitLab EE version 19.3 to 19.3.1.

**Name of the Vulnerable Software and Affected Versions** GitLab EE versions 19.1 through 19.1.0 **Description** Insufficient output filtering in Duo Workflows could allow a user to access sensitive information that had already been committed to a project. **Recommendations** Update GitLab EE to version 19.1.1.