CVE 2021-22258

The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses

See the