Serious CVE in GitLab.

Update ASAP if you are running an instance.

https://thehackernews.com/2024/01/urgent-gitlab-releases-patch-for.html

Reply to this note

Please Login to reply.

Discussion

Also, if you had 2FA enabled, you're pretty much safe.

I had it enabled on my account, but some users on my server did not. That has now changed. Fortunately, we weren't exploited.

Really no excuse for not having 2FA anymore.

Ummm…

What’s up brother? Did I miss something?

On the contrary… you’re prolly spot on, and I’ve just been reluctant … um … yea.