A remote prompt injection flaw in GitLab Duo allowed attackers to steal private source code and inject malicious HTML. GitLab has since patched the issue.
GitLab Vulnerability ‘Highlights the Double-Edged Nature of AI Assistants’
By
/ May 27, 2025 
