An information disclosure vulnerability in the GitLab CE/EE API since version 8.9.6 allows a user to see basic information on private groups that a public project has been shared with
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-39905.json"