Launchpad.net

CVE 2020-13323

A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos

See the CVE page on Mitre.org for more details.