Security: Groups are visible to Anonymous users
The "explore" page list all Groups and Numbers or project they contains to Anonymous users.
https://gitlab.com/explore/groups
The pages should only display either public groups, or groups that contain public projects. Otherwise you expose them.
Thanks