GitLab Security Updates - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.

1. Codeowners bypass
2. User impersonation
3. Pages domain hijack
4. Emojis
5. Leaky role permissions
6. ../
7. HTML injection
8. Privilege escalation
9. SAML
10. CSRF / SSRF
11. AI
12. Banned users not actually banned
13. GraphQL
14. Maven dependency proxy
15. Improper token revocation
16. Package registry
17. Merge request bypass
18. Sensitive data exposure
19. Arbitrary pipeline execution
20. OAuth / OIDC
21. (Re)DoS
22. CI/CD scheduling
23. Authn bypass
24. CI/CD variable exposure