Labels

The vulnerability was incorrectly reported and is not actually present or exploitable in any way.

The severity level downgraded because compensating controls in place AND the risk is accepted (i.e. will not be fixed).

The severity level should be downgraded due to compensating controls in place.

The issue is not able to be remediated due to technical constraints. This state will keep the issue open until it is able to be remediated in the future.

The vulnerability will be remediated and an exception request is not required

Label used for Security Review Framework https://handbook.gitlab.com/handbook/security/product-security/security-review-framework/

Label used for Security Review Framework https://handbook.gitlab.com/handbook/security/product-security/security-review-framework/

Roadmap items with low certainty but that we think we want to do in the future.

Roadmap themes to be worked on after the current themes are completed.

Themes in the roadmap that are currently being worked on

Roadmap items that are continually working on.