A verbose error message in GitLab EE affecting all versions since 12.2 could disclose the private email address of a user invited to a group
{ "ubuntu_priority": "medium" }