THOUSANDS OF GITLAB INSTANCES UNPATCHED AGAINST CRITICAL PASSWORD RESET BUG

Summary from the TLDR InfoSec newsletter

More than 5,000 GitLab servers have not been patched for a critical vulnerability that allows attackers to hijack the password reset process.