Henrik Sandberg

**Name of the Vulnerable Software and Affected Versions** GitLab EE versions 17.0 through 19.0.4 GitLab EE versions 19.1 through 19.1.2 GitLab EE versions 19.2 through 19.2.0 **Description** A race condition in approval rule processing may allow an authenticated user to merge code into a protected branch without obtaining the necessary approvals. **Recommendations** Update GitLab EE versions 17.0 through 19.0.4 to version 19.0.5. Update GitLab EE versions 19.1 through 19.1.2 to version 19.1.3. Update GitLab EE versions 19.2 through 19.2.0 to version 19.2.1.