Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an attacker to access a user's custom project and group templates
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-39930.json"