CVEs affecting projects tracked on Release Alert, from NVD & OSV.
GitLab EE 12.6 and later through 12.7.2 allows Denial of Service.