UnratedFix available
Improved security for feed tokens
Type: patchSources: GitLab releases
GitLab 16.2 makes feed tokens work only for the URL they were generated for, narrowing the scope of feeds readable if a token is leaked.
- Products
- GitLab
- Affected versions
- Not specified
- Fixed versions
- 16.2
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 00:55 UTC · Revision 1
Source evidence
Improved security for feed tokens
official-gitlab-releases · Original sourcePublished 22 Jul 2023, 00:00 UTC
GitLab 16.2 makes feed tokens work only for the URL they were generated for, narrowing the scope of feeds readable if a token is leaked.
Feed tokens have been made more secure by only working for the URL they were generated for. This narrows the scope of feeds that can be read if the token was leaked.
GitLab
Fixed versions: 16.2
Complete source record
{
"id": "7ab6b35c89256efea13d2f0ba3de8da42c9fee37913f9883a3dd93dfc2f02fff",
"url": "https://docs.gitlab.com/releases/16/gitlab-16-2-released/",
"method": "llm",
"payload": {
"kind": "patch",
"title": "Improved security for feed tokens",
"summary": "GitLab 16.2 makes feed tokens work only for the URL they were generated for, narrowing the scope of feeds readable if a token is leaked.",
"evidence": "Feed tokens have been made more secure by only working for the URL they were generated for. This narrows the scope of feeds that can be read if the token was leaked.",
"products": [
{
"name": {
"value": "GitLab",
"evidence": "GitLab 16.2 was released"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "16.2",
"evidence": "GitLab 16.2 was released"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "official-gitlab-releases",
"document_id": 23727,
"published_at": "2023-07-22T00:00:00+00:00"
}