Gitlab · Gitlab Ce/Ee · CVE-2021-39919
**Name of the Vulnerable Software and Affected Versions**
GitLab CE/EE versions 14.0 through 14.3.5
GitLab CE/EE versions 14.4 through 14.4.3
GitLab CE/EE versions 14.5 through 14.5.1
**Description**
The reset password token and new user email token are accidentally logged, which may lead to information disclosure.
**Recommendations**
For GitLab CE/EE versions 14.0 through 14.3.5, update to version 14.3.6 or later.
For GitLab CE/EE versions 14.4 through 14.4.3, update to version 14.4.4 or later.
For GitLab CE/EE versions 14.5 through 14.5.1, update to version 14.5.2 or later.