Subbotin

**Name of the Vulnerable Software and Affected Versions** GitLab CE/EE versions 12.8 through 13.10.4 GitLab CE/EE versions 13.11 through 13.11.4 GitLab CE/EE versions 13.12 through 13.12.1 **Description** The issue is related to errors in the x509 certificate authentication procedure, which could be exploited by a remote attacker to impact data integrity. This could allow an attacker to spoof the author of signed commits. **Recommendations** For versions 12.8 through 13.10.4, update to version 13.10.5 or later. For versions 13.11 through 13.11.4, update to version 13.11.5 or later. For versions 13.12 through 13.12.1, update to version 13.12.2 or later.