BigW Consortium Gitlab
[10.5] Server Side Request Forgery in Services and Web Hooks See merge request gitlab/gitlabhq!2348