[{"data":1,"prerenderedAt":936},["ShallowReactive",2],{"/blog/action-needed-in-response-to-cve2021-22205":3,"navigation-en-us":150,"banner-en-us":578,"footer-en-us":588,"blog-post-authors-en-us-GitLab":833,"blog-related-posts-en-us-action-needed-in-response-to-cve2021-22205":848,"blog-promotions-en-us":873,"next-steps-en-us":926},{"id":4,"title":5,"authors":6,"body":8,"category":131,"date":132,"description":133,"extension":134,"externalUrl":135,"faq":135,"featured":136,"heroImage":137,"meta":138,"navigation":139,"path":140,"seo":141,"slug":145,"stem":146,"tags":147,"template":148,"updatedDate":135,"__hash__":149},"blogPosts/en-us/blog/action-needed-in-response-to-cve2021-22205.md","Action needed by self-managed customers in response to CVE-2021-22205",[7],"GitLab",{"type":9,"value":10,"toc":127},"minimark",[11,21,30,37,42,45,58,71,76,84,89,100,119],[12,13,14,20],"p",{},[15,16,19],"a",{"href":17,"rel":18},"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22205",[],"CVE-2021-22205"," is a critical severity vulnerability (CVSS 10.0) that is a result of improper validation of image files by a 3rd-party file parser Exif-Tool, resulting in a remote command execution vulnerability that can lead to the compromise of your GitLab instance.",[12,22,23,24,29],{},"This issue was remediated and patched in the ",[15,25,28],{"href":26,"rel":27},"https://docs.gitlab.com/releases/",[],"GitLab 13.10.3, 13.9.6, and 13.8.8 release from April 14, 2021",".",[12,31,32,36],{},[33,34,35],"strong",{},"We have confirmed reports of the vulnerability being exploited on self-managed public-facing GitLab instances."," GitLab.com users are not affected.",[12,38,39],{},[33,40,41],{},"GitLab versions affected by CVE-2021-22205:",[12,43,44],{},"Self-managed customers running the following GitLab versions are vulnerable to this publicly available exploit:",[46,47,48,52,55],"ul",{},[49,50,51],"li",{},"11.9.x - 13.8.7",[49,53,54],{},"13.9.0 - 13.9.5",[49,56,57],{},"13.10.0 - 13.10.2",[12,59,60,61,65,66,29],{},"GitLab self-managed administrators can see their GitLab version at ",[62,63,64],"code",{},"\u003Cgitlab_url>/admin",".\nSee more about the ",[15,67,70],{"href":68,"rel":69},"https://docs.gitlab.com/administration/admin_area/#admin-area-dashboard",[],"dashboard",[12,72,73],{},[33,74,75],{},"Determine if you have been impacted:",[12,77,78,79,29],{},"Steps that users can take to investigate whether their GitLab instance has been compromised are outlined in this forum post, ",[15,80,83],{"href":81,"rel":82},"https://forum.gitlab.com/t/cve-2021-22205-how-to-determine-if-a-self-managed-instance-has-been-impacted/60918",[],"\"CVE-2021-22205: How to determine if a self-managed instance has been impacted\"",[12,85,86],{},[33,87,88],{},"Action you need to take:",[12,90,91,92,96,97,29],{},"Due to the severity and potential impact from exploitation of this vulnerability, it is imperative users upgrade to a fixed version as soon as possible: ",[15,93,95],{"href":94},"/update/","https://about.gitlab.com/update",". This issue was remediated and patched in the ",[15,98,28],{"href":26,"rel":99},[],[12,101,102,103,108,109,113,114,29],{},"If you can't upgrade quickly, a ",[15,104,107],{"href":105,"rel":106},"https://forum.gitlab.com/t/cve-2021-22205-how-to-determine-if-a-self-managed-instance-has-been-impacted/60918/2",[],"hotpatch is available",".\nIf you have questions, you may post in our ",[15,110,112],{"href":81,"rel":111},[],"forum on this topic",". If you have an active Support contract, please create a support ticket at ",[15,115,118],{"href":116,"rel":117},"http://support.gitlab.com/",[],"support.gitlab.com",[12,120,121,122,29],{},"Please ",[15,123,126],{"href":124,"rel":125},"https://about.gitlab.com/company/preference-center/",[],"subscribe to our security alarts mailing list",{"title":128,"searchDepth":129,"depth":129,"links":130},"",2,[],"security","2021-11-04","Self-managed users using outdated versions should update immediately.","md",null,false,"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749666816/Blog/Hero%20Images/security-cover.png",{},true,"/en-us/blog/action-needed-in-response-to-cve2021-22205",{"title":5,"description":133,"ogTitle":5,"ogDescription":133,"noIndex":136,"ogImage":137,"ogUrl":142,"ogSiteName":143,"ogType":144,"canonicalUrls":142},"https://about.gitlab.com/blog/action-needed-in-response-to-cve2021-22205","https://about.gitlab.com","article","action-needed-in-response-to-cve2021-22205","en-us/blog/action-needed-in-response-to-cve2021-22205",[131],"BlogPost","GEv6jlRvqA_Q1hRBndZJhkbfYxmHkOLLD0tOVEYcUyc",{"logo":151,"freeTrial":156,"sales":161,"login":166,"items":171,"search":498,"minimal":529,"duo":548,"switchNav":557,"pricingDeployment":568},{"config":152},{"href":153,"dataGaName":154,"dataGaLocation":155},"/","gitlab logo","header",{"text":157,"config":158},"Get free trial",{"href":159,"dataGaName":160,"dataGaLocation":155},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com&glm_content=default-saas-trial/","free trial",{"text":162,"config":163},"Request a demo",{"href":164,"dataGaName":165,"dataGaLocation":155},"/sales/?contact-topic=request-demo","sales",{"text":167,"config":168},"Sign in",{"href":169,"dataGaName":170,"dataGaLocation":155},"https://gitlab.com/users/sign_in/","sign in",[172,201,301,306,420,476],{"text":173,"config":174,"menu":176},"Platform",{"dataNavLevelOne":175},"platform",{"type":177,"columns":178},"cards",[179,185,193],{"title":173,"description":180,"link":181},"The intelligent orchestration platform for DevSecOps",{"text":182,"config":183},"Explore our Platform",{"href":184,"dataGaName":175,"dataGaLocation":155},"/platform/",{"title":186,"description":187,"link":188},"GitLab Duo Agent Platform","Agentic AI for the entire software lifecycle",{"text":189,"config":190},"Meet GitLab Duo",{"href":191,"dataGaName":192,"dataGaLocation":155},"/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":194,"description":195,"link":196},"Why GitLab","See the top reasons enterprises choose GitLab",{"text":197,"config":198},"Learn more",{"href":199,"dataGaName":200,"dataGaLocation":155},"/why-gitlab/","why gitlab",{"text":202,"left":139,"config":203,"menu":205},"Product",{"dataNavLevelOne":204},"solutions",{"type":206,"link":207,"columns":211,"feature":280},"lists",{"text":208,"config":209},"View all Solutions",{"href":210,"dataGaName":204,"dataGaLocation":155},"/solutions/",[212,236,259],{"title":213,"description":214,"link":215,"items":220},"Automation","CI/CD and automation to accelerate deployment",{"config":216},{"icon":217,"href":218,"dataGaName":219,"dataGaLocation":155},"AutomatedCodeAlt","/solutions/delivery-automation/","automated software delivery",[221,225,228,232],{"text":222,"config":223},"CI/CD",{"href":224,"dataGaLocation":155,"dataGaName":222},"/solutions/continuous-integration/",{"text":186,"config":226},{"href":191,"dataGaLocation":155,"dataGaName":227},"gitlab duo agent platform - product menu",{"text":229,"config":230},"Source Code Management",{"href":231,"dataGaLocation":155,"dataGaName":229},"/solutions/source-code-management/",{"text":233,"config":234},"Automated Software Delivery",{"href":218,"dataGaLocation":155,"dataGaName":235},"Automated software delivery",{"title":237,"description":238,"link":239,"items":244},"Security","Deliver code faster without compromising security",{"config":240},{"href":241,"dataGaName":242,"dataGaLocation":155,"icon":243},"/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[245,249,254],{"text":246,"config":247},"Application Security Testing",{"href":241,"dataGaName":248,"dataGaLocation":155},"Application security testing",{"text":250,"config":251},"Software Supply Chain Security",{"href":252,"dataGaLocation":155,"dataGaName":253},"/solutions/supply-chain/","Software supply chain security",{"text":255,"config":256},"Software Compliance",{"href":257,"dataGaName":258,"dataGaLocation":155},"/solutions/software-compliance/","software compliance",{"title":260,"link":261,"items":266},"Measurement",{"config":262},{"icon":263,"href":264,"dataGaName":265,"dataGaLocation":155},"DigitalTransformation","/solutions/visibility-measurement/","visibility and measurement",[267,271,275],{"text":268,"config":269},"Visibility & Measurement",{"href":264,"dataGaLocation":155,"dataGaName":270},"Visibility and Measurement",{"text":272,"config":273},"Value Stream Management",{"href":274,"dataGaLocation":155,"dataGaName":272},"/solutions/value-stream-management/",{"text":276,"config":277},"Analytics & Insights",{"href":278,"dataGaLocation":155,"dataGaName":279},"/solutions/analytics-and-insights/","Analytics and insights",{"title":281,"type":206,"items":282},"GitLab for",[283,289,295],{"text":284,"config":285},"Enterprise",{"icon":286,"href":287,"dataGaLocation":155,"dataGaName":288},"Building","/enterprise/","enterprise",{"text":290,"config":291},"Small Business",{"icon":292,"href":293,"dataGaLocation":155,"dataGaName":294},"Work","/small-business/","small business",{"text":296,"config":297},"Public Sector",{"icon":298,"href":299,"dataGaLocation":155,"dataGaName":300},"Organization","/solutions/public-sector/","public sector",{"text":302,"config":303},"Pricing",{"href":304,"dataGaName":305,"dataGaLocation":155,"dataNavLevelOne":305},"/pricing/","pricing",{"text":307,"config":308,"menu":310},"Resources",{"dataNavLevelOne":309},"resources",{"type":206,"link":311,"columns":315,"feature":409},{"text":312,"config":313},"View all resources",{"href":314,"dataGaName":309,"dataGaLocation":155},"/resources/",[316,349,376],{"title":317,"items":318},"Getting started",[319,324,329,334,339,344],{"text":320,"config":321},"Install",{"href":322,"dataGaName":323,"dataGaLocation":155},"/install/","install",{"text":325,"config":326},"Quick start guides",{"href":327,"dataGaName":328,"dataGaLocation":155},"/get-started/","quick setup checklists",{"text":330,"config":331},"Learn",{"href":332,"dataGaLocation":155,"dataGaName":333},"https://university.gitlab.com/","learn",{"text":335,"config":336},"Product documentation",{"href":337,"dataGaName":338,"dataGaLocation":155},"https://docs.gitlab.com/","product documentation",{"text":340,"config":341},"Best practice videos",{"href":342,"dataGaName":343,"dataGaLocation":155},"/getting-started-videos/","best practice videos",{"text":345,"config":346},"Integrations",{"href":347,"dataGaName":348,"dataGaLocation":155},"/integrations/","integrations",{"title":350,"items":351},"Discover",[352,357,362,367,371],{"text":353,"config":354},"Customer success stories",{"href":355,"dataGaName":356,"dataGaLocation":155},"/customers/","customer success stories",{"text":358,"config":359},"Blog",{"href":360,"dataGaName":361,"dataGaLocation":155},"/blog/","blog",{"text":363,"config":364},"Demo Hub",{"href":365,"dataGaName":366,"dataGaLocation":155},"/demo-hub/","demo hub",{"text":368,"config":369},"The Source",{"href":370,"dataGaName":361,"dataGaLocation":155},"/the-source/",{"text":372,"config":373},"Remote",{"href":374,"dataGaName":375,"dataGaLocation":155},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":377,"items":378},"Connect",[379,384,389,394,399,404],{"text":380,"config":381},"GitLab Services",{"href":382,"dataGaName":383,"dataGaLocation":155},"/services/","services",{"text":385,"config":386},"Contribute",{"href":387,"dataGaName":388,"dataGaLocation":155},"https://contributors.gitlab.com","contribute",{"text":390,"config":391},"Community",{"href":392,"dataGaName":393,"dataGaLocation":155},"/community/","community",{"text":395,"config":396},"Forum",{"href":397,"dataGaName":398,"dataGaLocation":155},"https://forum.gitlab.com/","forum",{"text":400,"config":401},"Events",{"href":402,"dataGaName":403,"dataGaLocation":155},"/events/","events",{"text":405,"config":406},"Partners",{"href":407,"dataGaName":408,"dataGaLocation":155},"/partners/","partners",{"config":410,"title":413,"text":414,"link":415},{"background":411,"textColor":412},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","What’s new in GitLab","Stay updated with our latest features and improvements.",{"text":416,"config":417},"Read the latest",{"href":418,"dataGaName":419,"dataGaLocation":155},"/whats-new/","whats new",{"text":421,"config":422,"menu":424},"Company",{"dataNavLevelOne":423},"company",{"type":206,"columns":425},[426],{"items":427},[428,433,439,441,446,451,456,461,466,471],{"text":429,"config":430},"About",{"href":431,"dataGaName":432,"dataGaLocation":155},"/company/","about",{"text":434,"config":435,"footerGa":438},"Jobs",{"href":436,"dataGaName":437,"dataGaLocation":155},"/jobs/","jobs",{"dataGaName":437},{"text":400,"config":440},{"href":402,"dataGaName":403,"dataGaLocation":155},{"text":442,"config":443},"Leadership",{"href":444,"dataGaName":445,"dataGaLocation":155},"/company/team/e-group/","leadership",{"text":447,"config":448},"Handbook",{"href":449,"dataGaName":450,"dataGaLocation":155},"https://handbook.gitlab.com/","handbook",{"text":452,"config":453},"Investor relations",{"href":454,"dataGaName":455,"dataGaLocation":155},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":457,"config":458},"Trust Center",{"href":459,"dataGaName":460,"dataGaLocation":155},"/security/","trust center",{"text":462,"config":463},"AI Transparency Center",{"href":464,"dataGaName":465,"dataGaLocation":155},"/ai-transparency-center/","ai transparency center",{"text":467,"config":468},"Newsletter",{"href":469,"dataGaName":470,"dataGaLocation":155},"/company/contact/#contact-forms","newsletter",{"text":472,"config":473},"Press",{"href":474,"dataGaName":475,"dataGaLocation":155},"/press/","press",{"text":477,"config":478,"menu":479},"Contact us",{"dataNavLevelOne":423},{"type":206,"columns":480},[481],{"items":482},[483,488,493],{"text":484,"config":485},"Talk to sales",{"href":486,"dataGaName":487,"dataGaLocation":155},"/sales/","talk to sales",{"text":489,"config":490},"Support portal",{"href":491,"dataGaName":492,"dataGaLocation":155},"https://support.gitlab.com/hc/en-us","support portal",{"text":494,"config":495},"Customer portal",{"href":496,"dataGaName":497,"dataGaLocation":155},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":499,"login":500,"suggestions":507},"Close",{"text":501,"link":502},"To search repositories and projects, login to",{"text":503,"config":504},"gitlab.com",{"href":169,"dataGaName":505,"dataGaLocation":506},"search login","search",{"text":508,"default":509},"Suggestions",[510,512,516,518,522,526],{"text":186,"config":511},{"href":191,"dataGaName":186,"dataGaLocation":506},{"text":513,"config":514},"Code Suggestions (AI)",{"href":515,"dataGaName":513,"dataGaLocation":506},"/solutions/code-suggestions/",{"text":222,"config":517},{"href":224,"dataGaName":222,"dataGaLocation":506},{"text":519,"config":520},"GitLab on AWS",{"href":521,"dataGaName":519,"dataGaLocation":506},"/partners/technology-partners/aws/",{"text":523,"config":524},"GitLab on Google Cloud",{"href":525,"dataGaName":523,"dataGaLocation":506},"/partners/technology-partners/google-cloud-platform/",{"text":527,"config":528},"Why GitLab?",{"href":199,"dataGaName":527,"dataGaLocation":506},{"freeTrial":530,"mobileIcon":535,"desktopIcon":540,"secondaryButton":543},{"text":531,"config":532},"Start free trial",{"href":533,"dataGaName":160,"dataGaLocation":534},"https://gitlab.com/-/trials/new/","nav",{"altText":536,"config":537},"Gitlab Icon",{"src":538,"dataGaName":539,"dataGaLocation":534},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":536,"config":541},{"src":542,"dataGaName":539,"dataGaLocation":534},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":544,"config":545},"Get Started",{"href":546,"dataGaName":547,"dataGaLocation":534},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/get-started/","get started",{"freeTrial":549,"mobileIcon":553,"desktopIcon":555},{"text":550,"config":551},"Learn more about GitLab Duo",{"href":191,"dataGaName":552,"dataGaLocation":534},"gitlab duo",{"altText":536,"config":554},{"src":538,"dataGaName":539,"dataGaLocation":534},{"altText":536,"config":556},{"src":542,"dataGaName":539,"dataGaLocation":534},{"button":558,"mobileIcon":563,"desktopIcon":565},{"text":559,"config":560},"/switch",{"href":561,"dataGaName":562,"dataGaLocation":534},"#contact","switch",{"altText":536,"config":564},{"src":538,"dataGaName":539,"dataGaLocation":534},{"altText":536,"config":566},{"src":567,"dataGaName":539,"dataGaLocation":534},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":569,"mobileIcon":574,"desktopIcon":576},{"text":570,"config":571},"Back to pricing",{"href":304,"dataGaName":572,"dataGaLocation":534,"icon":573},"back to pricing","GoBack",{"altText":536,"config":575},{"src":538,"dataGaName":539,"dataGaLocation":534},{"altText":536,"config":577},{"src":542,"dataGaName":539,"dataGaLocation":534},{"title":579,"titleMobile":580,"button":581,"config":586},"Duo Agent Platform delivers 400% ROI, per new Forrester Consulting study.","400% ROI: Forrester TEI for GitLab Duo",{"text":197,"config":582},{"href":583,"dataGaName":584,"dataGaLocation":585},"https://about.gitlab.com/blog/gitlab-duo-agent-platform-delivers-400-percent-roi/","forrester-tei-dap-banner","global-banner",{"layout":587,"disabled":136},"release",{"data":589},{"text":590,"source":591,"edit":597,"contribute":602,"config":607,"items":612,"minimal":822},"Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license",{"text":592,"config":593},"View page source",{"href":594,"dataGaName":595,"dataGaLocation":596},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":598,"config":599},"Edit this page",{"href":600,"dataGaName":601,"dataGaLocation":596},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":603,"config":604},"Please contribute",{"href":605,"dataGaName":606,"dataGaLocation":596},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":608,"facebook":609,"youtube":610,"linkedin":611},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[613,660,714,758,790],{"title":302,"links":614,"subMenu":629},[615,619,624],{"text":616,"config":617},"View plans",{"href":304,"dataGaName":618,"dataGaLocation":596},"view plans",{"text":620,"config":621},"Why Premium?",{"href":622,"dataGaName":623,"dataGaLocation":596},"/pricing/premium/","why premium",{"text":625,"config":626},"Why Ultimate?",{"href":627,"dataGaName":628,"dataGaLocation":596},"/pricing/ultimate/","why ultimate",[630],{"title":631,"links":632},"Contact Us",[633,636,638,640,645,650,655],{"text":634,"config":635},"Contact sales",{"href":486,"dataGaName":165,"dataGaLocation":596},{"text":489,"config":637},{"href":491,"dataGaName":492,"dataGaLocation":596},{"text":494,"config":639},{"href":496,"dataGaName":497,"dataGaLocation":596},{"text":641,"config":642},"Status",{"href":643,"dataGaName":644,"dataGaLocation":596},"https://status.gitlab.com/","status",{"text":646,"config":647},"Terms of use",{"href":648,"dataGaName":649,"dataGaLocation":596},"/terms/","terms of use",{"text":651,"config":652},"Privacy statement",{"href":653,"dataGaName":654,"dataGaLocation":596},"/privacy/","privacy statement",{"text":656,"config":657},"Cookie preferences",{"dataGaName":658,"dataGaLocation":596,"id":659,"isOneTrustButton":139},"cookie preferences","ot-sdk-btn",{"title":202,"links":661,"subMenu":670},[662,666],{"text":663,"config":664},"DevSecOps platform",{"href":184,"dataGaName":665,"dataGaLocation":596},"devsecops platform",{"text":667,"config":668},"AI-Assisted Development",{"href":191,"dataGaName":669,"dataGaLocation":596},"ai-assisted development",[671],{"title":672,"links":673},"Topics",[674,679,684,689,694,699,704,709],{"text":675,"config":676},"CICD",{"href":677,"dataGaName":678,"dataGaLocation":596},"/topics/ci-cd/","cicd",{"text":680,"config":681},"GitOps",{"href":682,"dataGaName":683,"dataGaLocation":596},"/topics/gitops/","gitops",{"text":685,"config":686},"DevOps",{"href":687,"dataGaName":688,"dataGaLocation":596},"/topics/devops/","devops",{"text":690,"config":691},"Version Control",{"href":692,"dataGaName":693,"dataGaLocation":596},"/topics/version-control/","version control",{"text":695,"config":696},"DevSecOps",{"href":697,"dataGaName":698,"dataGaLocation":596},"/topics/devsecops/","devsecops",{"text":700,"config":701},"Cloud Native",{"href":702,"dataGaName":703,"dataGaLocation":596},"/topics/cloud-native/","cloud native",{"text":705,"config":706},"AI for Coding",{"href":707,"dataGaName":708,"dataGaLocation":596},"/topics/devops/ai-for-coding/","ai for coding",{"text":710,"config":711},"Agentic AI",{"href":712,"dataGaName":713,"dataGaLocation":596},"/topics/agentic-ai/","agentic ai",{"title":715,"links":716},"Solutions",[717,719,721,726,730,733,737,740,742,745,748,753],{"text":246,"config":718},{"href":241,"dataGaName":246,"dataGaLocation":596},{"text":235,"config":720},{"href":218,"dataGaName":219,"dataGaLocation":596},{"text":722,"config":723},"Agile development",{"href":724,"dataGaName":725,"dataGaLocation":596},"/solutions/agile-delivery/","agile delivery",{"text":727,"config":728},"SCM",{"href":231,"dataGaName":729,"dataGaLocation":596},"source code management",{"text":675,"config":731},{"href":224,"dataGaName":732,"dataGaLocation":596},"continuous integration & delivery",{"text":734,"config":735},"Value stream management",{"href":274,"dataGaName":736,"dataGaLocation":596},"value stream management",{"text":680,"config":738},{"href":739,"dataGaName":683,"dataGaLocation":596},"/solutions/gitops/",{"text":284,"config":741},{"href":287,"dataGaName":288,"dataGaLocation":596},{"text":743,"config":744},"Small business",{"href":293,"dataGaName":294,"dataGaLocation":596},{"text":746,"config":747},"Public sector",{"href":299,"dataGaName":300,"dataGaLocation":596},{"text":749,"config":750},"Education",{"href":751,"dataGaName":752,"dataGaLocation":596},"/solutions/education/","education",{"text":754,"config":755},"Financial services",{"href":756,"dataGaName":757,"dataGaLocation":596},"/solutions/finance/","financial services",{"title":307,"links":759},[760,762,764,766,769,771,774,776,778,780,782,784,786,788],{"text":320,"config":761},{"href":322,"dataGaName":323,"dataGaLocation":596},{"text":325,"config":763},{"href":327,"dataGaName":328,"dataGaLocation":596},{"text":330,"config":765},{"href":332,"dataGaName":333,"dataGaLocation":596},{"text":335,"config":767},{"href":337,"dataGaName":768,"dataGaLocation":596},"docs",{"text":358,"config":770},{"href":360,"dataGaName":361,"dataGaLocation":596},{"text":772,"config":773},"What's new",{"href":418,"dataGaName":419,"dataGaLocation":596},{"text":353,"config":775},{"href":355,"dataGaName":356,"dataGaLocation":596},{"text":372,"config":777},{"href":374,"dataGaName":375,"dataGaLocation":596},{"text":380,"config":779},{"href":382,"dataGaName":383,"dataGaLocation":596},{"text":385,"config":781},{"href":387,"dataGaName":388,"dataGaLocation":596},{"text":390,"config":783},{"href":392,"dataGaName":393,"dataGaLocation":596},{"text":395,"config":785},{"href":397,"dataGaName":398,"dataGaLocation":596},{"text":400,"config":787},{"href":402,"dataGaName":403,"dataGaLocation":596},{"text":405,"config":789},{"href":407,"dataGaName":408,"dataGaLocation":596},{"title":421,"links":791},[792,794,796,798,800,802,806,811,813,815,817],{"text":429,"config":793},{"href":431,"dataGaName":423,"dataGaLocation":596},{"text":434,"config":795},{"href":436,"dataGaName":437,"dataGaLocation":596},{"text":442,"config":797},{"href":444,"dataGaName":445,"dataGaLocation":596},{"text":447,"config":799},{"href":449,"dataGaName":450,"dataGaLocation":596},{"text":452,"config":801},{"href":454,"dataGaName":455,"dataGaLocation":596},{"text":803,"config":804},"Sustainability",{"href":805,"dataGaName":803,"dataGaLocation":596},"/sustainability/",{"text":807,"config":808},"Diversity, inclusion and belonging (DIB)",{"href":809,"dataGaName":810,"dataGaLocation":596},"/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":457,"config":812},{"href":459,"dataGaName":460,"dataGaLocation":596},{"text":467,"config":814},{"href":469,"dataGaName":470,"dataGaLocation":596},{"text":472,"config":816},{"href":474,"dataGaName":475,"dataGaLocation":596},{"text":818,"config":819},"Modern Slavery Transparency Statement",{"href":820,"dataGaName":821,"dataGaLocation":596},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":823},[824,827,830],{"text":825,"config":826},"Terms",{"href":648,"dataGaName":649,"dataGaLocation":596},{"text":828,"config":829},"Cookies",{"dataGaName":658,"dataGaLocation":596,"id":659,"isOneTrustButton":139},{"text":831,"config":832},"Privacy",{"href":653,"dataGaName":654,"dataGaLocation":596},[834],{"id":835,"title":836,"body":135,"config":837,"content":839,"description":135,"extension":842,"meta":843,"navigation":139,"path":844,"seo":845,"stem":846,"__hash__":847},"blogAuthors/en-us/blog/authors/gitlab.yml","Gitlab",{"template":838},"BlogAuthor",{"name":7,"config":840},{"headshot":841,"ctfId":7},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1749659488/Blog/Author%20Headshots/gitlab-logo-extra-whitespace.png","yml",{},"/en-us/blog/authors/gitlab",{},"en-us/blog/authors/gitlab","XCBKIcPoCs6zi2oHG7o-bAp52Jhaw8_zGhIJ2jNrEjU",[849,857,865],{"title":850,"description":851,"heroImage":852,"category":131,"date":853,"authors":854,"slug":856,"externalUrl":135},"How GitLab tracks vulnerabilities through refactors and reformatting","Learn how GitLab's improved Scope+Offset fingerprinting keeps vulnerability tracking stable across comments, blank lines, and reformatting.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png","2026-08-12",[855],"Julian Thome","improved-scope-offset-fingerprinting",{"title":858,"description":859,"heroImage":852,"category":131,"date":860,"authors":861,"slug":864,"externalUrl":135},"GitLab Secrets Manager adds ESO, Terraform, API support","Simplify credential management across your stack. GitLab Secrets Manager provides secure retrieval in Kubernetes, Terraform, and external workflows.","2026-08-06",[862,863],"Erick Bajao","Joe Randazzo","gitlab-secrets-manager-add-eso-terraform-api-support",{"title":866,"description":867,"heroImage":868,"category":131,"date":869,"authors":870,"slug":872,"externalUrl":135},"Secure every commit to production with Claude and GitLab","Claude Security catches vulnerabilities inside a coding session. GitLab picks up from there, scanning, enforcing policy, and producing audit evidence for the software lifecycle. ","https://res.cloudinary.com/about-gitlab-com/image/upload/v1756122536/akivvcnafog9c4dhhzkp.png","2026-08-03",[871],"Alisa Ho","claude-security-and-gitlab",{"promotions":874},[875,889,901,912],{"id":876,"categories":877,"header":879,"text":880,"button":881,"image":886},"ai-modernization",[878],"ai","Is AI achieving its promise at scale?","Quiz will take 5 minutes or less",{"text":882,"config":883},"Get your AI maturity score",{"href":884,"dataGaName":885,"dataGaLocation":361},"/assessments/ai-modernization-assessment/","modernization assessment",{"config":887},{"src":888},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/qix0m7kwnd8x2fh1zq49.png",{"id":890,"categories":891,"header":893,"text":880,"button":894,"image":898},"devops-modernization",[892,698],"product","Are you just managing tools or shipping innovation?",{"text":895,"config":896},"Get your DevOps maturity score",{"href":897,"dataGaName":885,"dataGaLocation":361},"/assessments/devops-modernization-assessment/",{"config":899},{"src":900},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138785/eg818fmakweyuznttgid.png",{"id":902,"categories":903,"header":904,"text":880,"button":905,"image":909},"security-modernization",[131],"Are you trading speed for security?",{"text":906,"config":907},"Get your security maturity score",{"href":908,"dataGaName":885,"dataGaLocation":361},"/assessments/security-modernization-assessment/",{"config":910},{"src":911},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1772138786/p4pbqd9nnjejg5ds6mdk.png",{"id":913,"paths":914,"header":917,"text":918,"button":919,"image":924},"github-azure-migration",[915,916],"migration-from-azure-devops-to-gitlab","integrating-azure-devops-scm-and-gitlab","Is your team ready for GitHub's Azure move?","GitHub is already rebuilding around Azure. Find out what it means for you.",{"text":920,"config":921},"See how GitLab compares to GitHub",{"href":922,"dataGaName":923,"dataGaLocation":361},"/compare/gitlab-vs-github/github-azure-migration/","github azure migration",{"config":925},{"src":900},{"header":927,"blurb":928,"button":929,"secondaryButton":934},"Start building faster today","See what your team can do with the intelligent orchestration platform for DevSecOps.\n",{"text":930,"config":931},"Get your free trial",{"href":932,"dataGaName":160,"dataGaLocation":933},"https://gitlab.com/-/trial_registrations/new?glm_content=default-saas-trial&glm_source=about.gitlab.com/","feature",{"text":634,"config":935},{"href":486,"dataGaName":165,"dataGaLocation":933},1786803741952]