Rogerace

**Name of the Vulnerable Software and Affected Versions** GitLab EE versions 13.1 through 19.1.6 GitLab EE versions 19.2 through 19.2.4 GitLab EE versions 19.3 through 19.3.0 **Description** An improper authorization check allows an authenticated user with reporter-role permissions who authored a merge request to reset merge request approval rules under certain conditions. **Recommendations** Update to version 19.1.7 Update to version 19.2.5 Update to version 19.3.1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.12 through 17.8.6 GitLab CE/EE versions 17.9 through 17.9.5 GitLab CE/EE versions 17.10 through 17.10.3 Description: An issue has been discovered affecting GitLab CE/EE, where under certain conditions, users could bypass IP access restrictions and view sensitive information. Recommendations: For versions 13.12 through 17.8.6, update to version 17.8.7 or later. For versions 17.9 through 17.9.5, update to version 17.9.6 or later. For versions 17.10 through 17.10.3, update to version 17.10.4 or later.