A long-lived token embedded in GitLab’s issue-creating email address means anyone with the address, not just the project ...
A security researcher hijacked hundreds of GitLab domains in just a few seconds by exploiting a weakness in how the company handles domain verification — a security issue that the company has now ...