GITLAB WARNS OF CRITICAL PIPELINE EXECUTION VULNERABILITY

Summary from the TLDR InfoSec newsletter

GitLab has released a bulletin urging CE and EE users to update their installation to fix a critical vulnerability. The vulnerability allows RCE via environment stop action jobs. The fix also addresses four other high severity vulnerabilities that can be exploited to achieve RCE.