Incorrect Permission Assignment for Critical Resource

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

Command Injection - Generic

OS Command Injection

Cross-site Scripting (XSS) - Stored

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Business Logic Errors

Missing Authorization

Server-Side Request Forgery (SSRF)

Insecure Storage of Sensitive Information

Code Injection

Resource Injection

Issues where features are either not enabled by default, or require configuration by the user before it can be used.

Epics, Issues and MRs related to the API Vision working group

GitLab Administration Working Group https://about.gitlab.com/company/team/structure/working-groups/administration/

The Continuous Scanning Working Group

WG to define the GitLab dashboard concepts and UI elements by FY24Q1

Issues and MRs related to the Feature Flag Usage Working Group