Product
Bytebase versions prior to 1.0.1 are vulnerable to an authentication bypass in the GitLab login flow, allowing unauthenticated attackers to impersonate any user, including administrative accounts.