GitLab patches Elasticsearch private group data leak bug | ZDNet
Submitted by a safety researcher in November 2019, the concern is explained as a failure to remove code from Elasticsearch API research final results when transferring a public team to a non-public team.
