Launchpad.net

CVE 2020-13277

An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5

See the CVE page on Mitre.org for more details.