Exposed GitLab project email addresses let attackers push code

Jak se o tom psalo 2

1. 24. 9. 2026 19:47 · BleepingComputer US nadpis události

   Exposed GitLab project email addresses let attackers push code

   Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to collect bug reports. [...]

2. 23. 9. 2026 08:00 · Aikido Security BE

   Send GitLab an email, push to main

   GitLab gives you a private email address to create issues. If leaked, anyone who has it can push code, execute CI/CD jobs, and bypass IP restrictions across all of your public and private projects. Category: Research