An issue has been discovered in GitLab affecting all versions starting with 13.7. GitLab was vulnerable to a stored XSS in merge request.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-22182.json"