Security Advisory
CVE-2018-19580
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made.