Critical GitLab Bug Threatens Software Development Pipelines

GitLab released patches addressing 14 security issues including a critical vulnerability (CVE-2024-5655, CVSS 9.6) affecting multiple versions that can let an attacker run pipelines as another user—potentially exposing private repositories and enabling code manipulation or exfiltration; GitLab reports no evidence of in-the-wild exploitation, but the flaw carries operational and regulatory compliance risks for organizations using affected GitLab versions.