GitLab GitLab Version Control Server

Known Exploited GitLab Vulnerabilities

The following GitLab vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.

The vulnerability CVE-2023-7028: GitLab Community and Enterprise Editions Improper Access Control Vulnerability is in the top 1% of the currently known exploitable vulnerabilities. 2 known exploited GitLab vulnerabilities are in the top 5% (95th percentile or greater) of the EPSS exploit probability rankings.

By the Year

In 2026 there have been 243 vulnerabilities in GitLab with an average score of 5.9 out of ten. Last year, in 2025 GitLab had 162 security vulnerabilities published. That is, 81 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.22

Recent GitLab Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-12664	Oct 21, 2026	GitLab Read-API Escalation via GraphQL Field before 19.3.6/19.4.3/19.5.1 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with a read_api-scoped token to retrieve a project's incoming email address and create work items, bypassing the token's restrictions, due to insufficient scope enforcement on a GraphQL field.	GitLab
CVE-2026-13319	Oct 21, 2026	GitLab CE/EE 15.10-19.5 Milestone API Auth Metadata Leak GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authenticated to read milestone metadata, including titles, descriptions, and full project paths, from arbitrary private projects across the instance without any project membership, due to missing authorization checks on a user-supplied project filter parameter in the group milestones API.	GitLab
CVE-2026-14288	Oct 21, 2026	GitLab EE Auth Bypass MR Approval Policy 17.4-19.5 GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a protected branch due to improper access control during approval rule synchronization.	GitLab
CVE-2026-15723	Oct 21, 2026	GitLab CE/EE LDAP Takeover via OmniAuth SAML/LDAP Auto-linking (19.5.1) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAuth SAML and LDAP auto-linking were both enabled, an authenticated user could have taken over an existing LDAP-backed account without any interaction from the targeted user, due to improper input sanitization in the LDAP email lookup path used during OmniAuth identity linking.	GitLab
CVE-2026-16255	Oct 21, 2026	GitLab EE Membership Lock Bypass (v <19.3.6/19.4.3/19.5.1) GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the instance-wide SAML or LDAP membership lock was enabled, an authenticated user could have granted or accepted project and group membership outside the identity provider's control, due to incomplete enforcement of the membership lock on requests created before the lock was enabled.	GitLab
CVE-2026-5954	Oct 13, 2026	GitLab CE/EE Improper Auth Download Vulnerability (v15.119.4.2) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks.	GitLab
CVE-2026-6567	Oct 13, 2026	Auth Reporter CI Artifact Access in GitLab CE/EE <19.2.8, 19.3.5, 19.4.2 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with reporter role to access restricted CI artifact report content they were not authorized to, due to missing authorization checks.	GitLab
CVE-2026-7767	Oct 13, 2026	GitLab CE/EE Kubernetes Proxy Redirect Validation Flaw (<=19.4.1) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server due to improper redirect validation in the Kubernetes proxy.	GitLab
CVE-2026-9268	Oct 13, 2026	GitLab EE: Auth Bypass in CI/CD Rollback Settings v13.619.2.8, 19.3, 19.4 GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with limited permissions to modify project CI/CD deployment rollback settings without proper authorization, due to insufficient access control checks.	GitLab
CVE-2026-14210	Oct 13, 2026	GitLab CE/EE Auth Bypass: Delete/Modify Group Labels (18.11-19.4) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a project-scoped fine-grained Personal Access Token to permanently delete or modify group-level labels, due to incorrect authorization logic on label ownership scope validation.	GitLab
CVE-2026-14552	Oct 13, 2026	GitLab CE/EE Auth Bypass in Epic Content (v17.0-19.4.2) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Guest access to read confidential epic content meant to be restricted by external authorization, due to incorrect authorization checks.	GitLab
CVE-2026-14814	Oct 13, 2026	GitLab CE/EE Cache Poisoning in Raw Repo Files (v<19.2.8,19.3<19.3.5,19.4<19.4.2) GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted users' CI/CD pipelines to execute specially crafted content and potentially exposing protected environment variables, due to improper validation of repository references.	GitLab
CVE-2026-16275	Oct 13, 2026	Unauthenticated Read of Private Notes in GitLab CE/EE (17.4-19.4) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read confidential notes on public projects due to incorrect authorization checks.	GitLab
CVE-2026-16301	Oct 13, 2026	GitLab CE/EE: Auth Bypass in CI/CD Pipeline Creation (18.7-19.4) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper authorization checks in the downstream pipeline creation service.	GitLab
CVE-2026-78335	Oct 13, 2026	GitLab CE/EE Auth Bypass via Finegranulated PAT (19.2.8, 19.3.5, 19.4.2) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a project-scoped fine-grained Personal Access Token to modify integrations belonging to a group outside the token's scope, due to incorrect authorization checks.	GitLab
CVE-2026-81839	Oct 13, 2026	GitLab EE Authenticated Pipeline Execution RCE via Policy Records (18.1-19.4.2) GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary CI/CD pipelines in a transferred project with the new group's privileges due to improper cleanup of scheduled pipeline execution policy records.	GitLab
CVE-2026-82632	Oct 13, 2026	Unauthorized project import via fine-grained PAT in GitLab 18.919.4 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a fine-grained Personal Access Token scoped only to user-boundary import permissions to import projects into group namespaces beyond the token's intended scope, due to incorrect authorization of the import target namespace.	GitLab
CVE-2026-84284	Oct 13, 2026	GitLab CE/EE unauth read of work items (17.1119.4.2) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, 19.3 before 19.3.6, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read work item contents from private groups and projects due to incorrect authorization checks.	GitLab
CVE-2026-85529	Oct 13, 2026	GitLab GraphQL API Unauthorized Read of Internal Notes (v19.2-19.4) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read internal notes and confidential system notes on public projects due to improper authorization in the GraphQL API.	GitLab
CVE-2026-92528	Oct 13, 2026	GitLab EE Improper Identity Res. Allows MR Approval (Pre-19.2.8/19.3.5/19.4.2) GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to approve a merge request despite having contributed commits to it, due to improper identity resolution.	GitLab
CVE-2026-92883	Oct 13, 2026	GitLab CE/EE pre19.2.8/19.3.5/19.4.2 JS exec via repo syntax highlight GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users' browser sessions via a specially crafted repository, due to improper sanitization of HTML attributes in syntax-highlighted output.	GitLab
CVE-2026-97229	Oct 13, 2026	GitLab CE/EE: Unauth RCE via crafted regex in CI/CD before 19.4.2 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.	GitLab
CVE-2026-96893	Oct 13, 2026	GitLab EE AI Agent Instruction Injection (19.1-19.2.8, 19.3-19.3.5, 19.4-19.4.2) GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command execution attributed to other users, due to improper neutralization of special elements in AI conversation context construction.	GitLab
CVE-2026-1403	Oct 07, 2026	GitLab CE/EE Remote DoS: Sidekiq Crash on CSV Import (v11.7-<18.8.9,18.9-<18.9.5,18.10-<18.10.3) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that when importing CSV files could have allowed an authenticated user to cause denial of service to Sidekiq workers due to improper validation of CSV file structure.	GitLab
CVE-2026-90970	Oct 02, 2026	GitLab AI Gateway Prompt Sandbox Escape CVE-2026-90970 (18.1.6-19.4.1) GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, resulting in arbitrary command execution on the AI Gateway.	Ai Gateway
CVE-2026-4523	Sep 29, 2026	GitLab CE/EE CI/CD Trace Read Auth Flaw 15.11-19.4 via GraphQL API GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API.	GitLab
CVE-2026-8937	Sep 29, 2026	GitLab CE/EE 19.0-19.4.1 Auth Bypass on Linked Work Items GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to read private child issue contents, including titles and descriptions, from projects they had no access to, due to missing authorization checks on linked work items within visible epics.	GitLab
CVE-2026-10518	Sep 29, 2026	GitLab EE Auth Bypass in EE 17.9-19.4.1: Guest can read private security policy GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with guest-level permissions to read private security policy content they were not authorized to access due to improper authorization enforcement.	GitLab
CVE-2026-84739	Sep 29, 2026	GitLab CE/EE XSS in MR Diff Viewer (v19.4.1) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary JavaScript in the context of another user's browser session due to improper sanitization of path components in the merge request diff viewer.	GitLab
CVE-2026-89078	Sep 23, 2026	GitLab CE/EE double free in CI/CD regex parsing (19.2-19.4) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a specially crafted regular expression in a CI/CD configuration.	GitLab
CVE-2026-92530	Sep 23, 2026	GitLab CE/EE Auth Spoof via Direct Transfer Import (v19.1-19.4) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to spoof merge request authorship and attribute content to arbitrary existing users on the target instance due to improper reliance on ephemeral cache state during Direct Transfer imports.	GitLab
CVE-2026-92470	Sep 23, 2026	GitLab EE 18.719.4.1 AuthZ flaw: Auth users read CI/CD vars via Duo AI GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to access sensitive CI/CD variable values from debug-mode job traces through the Duo AI troubleshooting feature due to missing authorization checks.	GitLab
CVE-2026-92529	Sep 23, 2026	GitLab EE 19.1-19.4 (pre-19.2.7/19.3.3/19.4.1) AI Governance Bypass (Auth) GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass admin-configured AI tool governance controls for workflows in namespaces they do not control due to improper authorization checks.	GitLab
CVE-2026-92874	Sep 23, 2026	GitLab <19.4 Improper Auth Allows MCP Token Scope Escalation GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with an MCP-scoped token to perform actions beyond the intended scope of that token due to improper authorization checks.	GitLab
CVE-2026-92628	Sep 23, 2026	GitLab CE/EE 18.619.4.1 Race Cond in MCP Search GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race condition, the MCP search tool's shared state handling could have caused search results to be returned under an incorrect user context.	GitLab
CVE-2026-93577	Sep 23, 2026	GitLab CE 19.2-19.4 CI/CD Regex Integer Overflow (arbitrary code) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when compiling a specially crafted regular expression in a CI/CD configuration.	GitLab
CVE-2026-86341	Sep 16, 2026	GitLab EE: Improper Access Control Lets Owner Disable Protected Env Approval GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user with Owner or Maintainer permissions could have silently disabled protected environment deployment approval requirements, allowing unapproved deployments to reach production, due to improper access control checks performed after the protected resource was modified.	GitLab
CVE-2024-11222	Sep 16, 2026	GitLab CE/EE Race Condition in Pipeline Creation (beyond 19.1.8, 19.2.6, 19.3.2) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed a developer user to perform actions in the context of another user's merge request commit due to a race condition issue in pipeline creation.	GitLab
CVE-2025-14871	Sep 16, 2026	GitLab GraphQL DoS via Complexity Calculation (v<19.3.2) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL complexity calculation logic.	GitLab
CVE-2026-1168	Sep 16, 2026	GitLab CE/EE DoS via GraphQL Complexity Calc (18.4.6-19.3.1) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL complexity calculation logic.	GitLab
CVE-2026-3855	Sep 16, 2026	GitLab CE/EE 18.x-19.3: Authenticated FS Disclosure via Terraform State Upload (CVE-2026-3855) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with project-level permissions to access restricted file contents on the server or cause denial of service due to improper validation of parameters in the Terraform state upload functionality.	GitLab
CVE-2026-7514	Sep 16, 2026	GitLab GenPkg Registry Auth Bypass 13.9-19.1.8/19.2-19.2.6/19.3-19.3.2 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with developer-role permissions could substitute package file content and hide packages from their owners due to improper authorization checks in the Generic Package Registry.	GitLab
CVE-2026-8030	Sep 16, 2026	GitLab auth group URL slug flaw (v13.0-19.1.8,19.2-19.2.6,19.3-19.3.2) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to prevent another user from modifying their group settings due to improper validation of group URL slugs during namespace transfers.	GitLab
CVE-2026-16794	Sep 16, 2026	GitLab EE 18.11-19.3.2 auth flaw: Execute CI/CD jobs as Security Manager GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with the Security Manager role to execute arbitrary CI/CD jobs and access protected variables within group projects due to improper authorization controls on compliance framework management.	GitLab
CVE-2026-19619	Sep 16, 2026	GitLab CE/EE 19.x XSS via Content Editor (up to 19.3.2) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to execute arbitrary JavaScript in the context of a targeted user's session due to improper sanitization of pasted HTML content in the Content Editor.	GitLab
CVE-2026-78252	Sep 16, 2026	GitLab Markdown JSON Table CSRF in CE/EE before 19.3.2 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user could have induced a targeted user to perform unintended state-changing HTTP requests due to improper sanitization of user-controlled data in the Markdown JSON table renderer.	GitLab
CVE-2026-79708	Sep 16, 2026	Insufficient Scope Validation in GL EE 19.0-19.3: Devs access vars & pipelines GitLab has remediated an issue in GitLab EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions could have allowed an authenticated user with developer permissions to execute a policy test pipeline on projects within their group and access protected CI/CD variables restricted to higher-privileged roles, due to insufficient scope validation.	GitLab
CVE-2026-12910	Sep 15, 2026	GitLab CE/EE Auth Bypass via Missing SAML Enforcement (18.6-<19.1.8, 19.2-<19.2.6, 19.3-<19.3.2) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to bypass SAML SSO sign-in restrictions and authenticate without SSO due to missing authentication enforcement checks.	GitLab
CVE-2026-13210	Sep 15, 2026	GitLab CE/EE ENV Scope Variable Leakage before 19.3.2 (CVE-2026-13210) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to access CI/CD variables outside their intended environment scope due to improper input validation in the environment scope pattern matcher.	GitLab
CVE-2026-82837	Sep 15, 2026	GitLab 10.1-19.x Auth Bypass on Internal Data Endpoints (CVE-2026-82837) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that certain conditions could have allowed an authenticated user to access sensitive credentials and tokens without transiting the expected proxy due to improper authorization checks on internal data emission endpoints.	GitLab