CVEs affecting projects tracked on Release Alert, from NVD & OSV.
GitLab EE 8.0 through 12.7.2 has Insecure Permissions (issue 1 of 2).