GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks

GitLab's automatically assigned incoming email addresses contain highly privileged access tokens that attackers can exploit for supply chain attacks. The tokens, embedded in the addresses, could allow unauthorized access to repositories and pipelines. GitLab has not yet issued a patch or workaround, leaving users vulnerable to potential compromise.