The CVE-2022-28131 vulnerability is fixed in the latest patches for the Go 1.17 and 1.18. Upgrade to the latest Go patch versions.
Closes: https://gitlab.com/gitlab-org/gitaly/-/issues/4439