GitLab Security Updates - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.

1. Privilege escalation
2. Package registry
3. CI/CD variable exposure
4. Improper token revocation
5. CI/CD scheduling
6. User impersonation
7. HTML injection
8. Codeowners bypass
9. Emojis
10. Pages domain hijack
11. Authn bypass
12. AI
13. ../
14. Maven dependency proxy
15. (Re)DoS
16. Banned users not actually banned
17. Sensitive data exposure
18. Merge request bypass
19. SAML
20. Arbitrary pipeline execution
21. OAuth / OIDC
22. CSRF / SSRF
23. GraphQL
24. Leaky role permissions