Jesus the amount of remote-exploitable bugs in Gitlab the last months is astonishing. At this point it's madness to even consider running a publicly-reachable Gitlab instance...
And that's actually pretty sad, because Gitlab is the only open-source alternative that can keep up with Github feature-wise.
And that's actually pretty sad, because Gitlab is the only open-source alternative that can keep up with Github feature-wise.