Under certain conditions, some users were able to push to protected branches that were restricted to deploy keys in GitLab CE/EE since version 13.9
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-22226.json"