[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNFEnOFCCcHyk-fiteZr9wi-NqdCxbm7IaQiYhqKVfho":3},{"article":4,"iocs":38},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":21,"category":22,"article_tags":25},"8247fb22-8972-49e1-bc67-de11e685d4e5","GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks","gitlab-email-addresses-can-be-weaponized-for-supply-chain-attacks-1c23b8","Incoming email addresses automatically assigned to each user on the platform contain highly privileged access tokens that attackers can use.","A security vulnerability has been discovered in GitLab where user-specific incoming email addresses can be weaponized. These email addresses, automatically assigned to each user, contain highly privileged access tokens. Attackers can exploit this by sending specially crafted emails to these addresses, potentially gaining unauthorized access and compromising the supply chain.","GitLab user email addresses contain access tokens exploitable for supply chain attacks.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fapplication-security\u002Fgitlab-email-addresses-supply-chain-attacks","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt60455cbfb6e49e3c\u002F6ab3c1c302cf7035adb7a896\u002Femail-Bussarin_Rinchumrus-Getty-2157664756.jpg?width=720&quality=80&disable=upscale","2026-09-23T20:53:38+00:00","2026-09-23T22:00:38.880493+00:00",8,[18],{"name":19,"type":20},"GitLab","product","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":21,"icon":11,"name":23,"slug":24},"Supply Chain","supply-chain",[26,28,33],{"category":27},{"id":21,"icon":11,"name":23,"slug":24},{"category":29},{"id":30,"icon":11,"name":31,"slug":32},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":34},{"id":35,"icon":11,"name":36,"slug":37},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[]]