Félix Veillette-Potvin

**Name of the Vulnerable Software and Affected Versions** GitLab CE/EE versions 8.3 through 18.11.5 GitLab CE/EE versions 19.0 through 19.0.2 GitLab CE/EE versions 19.1 through 19.1.0 **Description** Improper URL validation in mirror synchronization allows an authenticated user with maintainer-role permissions to make requests to internal network resources. **Recommendations** Update to version 18.11.6 Update to version 19.0.3 Update to version 19.1.1

**Name of the Vulnerable Software and Affected Versions** Intel(R) GPA software versions prior to 2023.3 **Description** The issue is related to incorrect default permissions in some Intel(R) GPA software installers, which may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 2023.3, update to version 2023.3 or later to resolve the issue.