Exposed GitLab project email addresses let attackers push code

Attackers can push code to GitLab projects by exploiting private email addresses that are deliberately exposed in READMEs, contributing guides, and support pages. These addresses allow developers to submit issues or tasks, but when publicized, they enable unauthorized code pushes. The exposure poses a security risk to projects relying on these email-based workflows.