Skip to content
Heist/ feed
Back to feed
UnratedFix available

Improved security for feed tokens

Type: patchSources: GitLab releases

GitLab 16.2 makes feed tokens work only for the URL they were generated for, narrowing the scope of feeds readable if a token is leaked.

Products
GitLab
Affected versions
Not specified
Fixed versions
16.2
CVEs
Not specified
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 00:55 UTC · Revision 1

Source evidence

Improved security for feed tokens

official-gitlab-releases · Original source

Published 22 Jul 2023, 00:00 UTC

GitLab 16.2 makes feed tokens work only for the URL they were generated for, narrowing the scope of feeds readable if a token is leaked.

Feed tokens have been made more secure by only working for the URL they were generated for. This narrows the scope of feeds that can be read if the token was leaked.

GitLab

Fixed versions: 16.2

Complete source record
{
  "id": "7ab6b35c89256efea13d2f0ba3de8da42c9fee37913f9883a3dd93dfc2f02fff",
  "url": "https://docs.gitlab.com/releases/16/gitlab-16-2-released/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Improved security for feed tokens",
    "summary": "GitLab 16.2 makes feed tokens work only for the URL they were generated for, narrowing the scope of feeds readable if a token is leaked.",
    "evidence": "Feed tokens have been made more secure by only working for the URL they were generated for. This narrows the scope of feeds that can be read if the token was leaked.",
    "products": [
      {
        "name": {
          "value": "GitLab",
          "evidence": "GitLab 16.2 was released"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "16.2",
            "evidence": "GitLab 16.2 was released"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-gitlab-releases",
  "document_id": 23727,
  "published_at": "2023-07-22T00:00:00+00:00"
}