GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
GraphQL introspection enabled at /api/graphql
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d603073f8703073f8703073f8703073f8703073f87
GraphQL introspection enabled at /api/graphql Detected: GitLab
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6fa8f57cf1f8f335de3915213dc94b0cbd146c80e
GraphQL introspection enabled at /api/graphql Types: 1600 (by kind: ENUM: 183, INPUT_OBJECT: 305, INTERFACE: 26, OBJECT: 961, SCALAR: 117, UNION: 8) Operations: - Query: Query | fields: abuseReport, abuseReportLabels, adminGroups, adminProjects, auditEventDefinitions - Mutation: Mutation | fields: abuseReportLabelCreate, achievementsAward, achievementsCreate, achievementsDelete, achievementsRevoke - Subscription: Subscription | fields: ciJobProcessed, ciJobStatusUpdated, ciPipelineScheduleStatusUpdated, ciPipelineStatusUpdated, issuableAssigneesUpdated Directives: deprecated, gl_introduced, include, oneOf, skip, specifiedBy (total: 6)
Open service 2a02:26f0:11a::5f65:1748:80 · gitlab.make.be
2026-01-22 18:37
HTTP/1.1 301 Moved Permanently Content-Type: text/html Content-Length: 162 Location: https://gitlab.make.be:443/ Expires: Thu, 22 Jan 2026 18:37:30 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 22 Jan 2026 18:37:30 GMT Connection: close Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 2a02:26f0:11a::5f65:1748:443 · gitlab.make.be
2026-01-22 18:37
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
Content-Length: 102
Content-Security-Policy:
Location: https://gitlab.make.be/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KFKFXY67KAYVQW4XBGQNQVX8","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KFKFXY67KAYVQW4XBGQNQVX8
X-Runtime: 0.022119
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
Expires: Thu, 22 Jan 2026 18:37:08 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 22 Jan 2026 18:37:08 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.make.be/users/sign_in">redirected</a>.</body></html>
Open service 2.16.183.21:80 · gitlab.make.be
2026-01-22 18:37
HTTP/1.1 301 Moved Permanently Content-Type: text/html Content-Length: 162 Location: https://gitlab.make.be:443/ Expires: Thu, 22 Jan 2026 18:37:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 22 Jan 2026 18:37:29 GMT Connection: close Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 2.16.183.13:443 · gitlab.make.be
2026-01-22 18:37
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
Content-Length: 102
Content-Security-Policy:
Location: https://gitlab.make.be/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KFKFXY1B8BDWEY11P9PYPEJQ","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KFKFXY1B8BDWEY11P9PYPEJQ
X-Runtime: 0.047283
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
Expires: Thu, 22 Jan 2026 18:37:08 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 22 Jan 2026 18:37:08 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.make.be/users/sign_in">redirected</a>.</body></html>
Open service 2.16.183.13:80 · gitlab.make.be
2026-01-22 18:37
HTTP/1.1 301 Moved Permanently Content-Type: text/html Content-Length: 162 Location: https://gitlab.make.be:443/ Expires: Thu, 22 Jan 2026 18:37:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 22 Jan 2026 18:37:29 GMT Connection: close Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 2a02:26f0:11a::5f65:1730:443 · gitlab.make.be
2026-01-22 18:37
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
Content-Length: 102
Content-Security-Policy:
Location: https://gitlab.make.be/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KFKFXY1V63MXJNRH3D2K20S3","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KFKFXY1V63MXJNRH3D2K20S3
X-Runtime: 0.022622
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
Expires: Thu, 22 Jan 2026 18:37:08 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 22 Jan 2026 18:37:08 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.make.be/users/sign_in">redirected</a>.</body></html>
Open service 2a02:26f0:11a::5f65:1730:80 · gitlab.make.be
2026-01-22 18:37
HTTP/1.1 301 Moved Permanently Content-Type: text/html Content-Length: 162 Location: https://gitlab.make.be:443/ Expires: Thu, 22 Jan 2026 18:37:30 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 22 Jan 2026 18:37:30 GMT Connection: close Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 2.16.183.21:443 · gitlab.make.be
2026-01-22 18:37
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
Content-Length: 102
Content-Security-Policy:
Location: https://gitlab.make.be/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KFKFXY0NZTNRXSQCS1542KKC","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KFKFXY0NZTNRXSQCS1542KKC
X-Runtime: 0.021465
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
Expires: Thu, 22 Jan 2026 18:37:08 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 22 Jan 2026 18:37:08 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.make.be/users/sign_in">redirected</a>.</body></html>
Open service 2.16.204.21:443 · gitlab.make.be
2026-01-09 13:49
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
Content-Length: 102
Content-Security-Policy:
Location: https://gitlab.make.be/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KEHG9WB1NHCE1H3YF8FWNYDT","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KEHG9WB1NHCE1H3YF8FWNYDT
X-Runtime: 0.020882
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
Expires: Fri, 09 Jan 2026 13:49:28 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 13:49:28 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.make.be/users/sign_in">redirected</a>.</body></html>
Open service 2.16.204.21:443 · gitlab.make.be
2026-01-02 13:53
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
Content-Length: 102
Content-Security-Policy:
Location: https://gitlab.make.be/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KDZFRSBQPT2B61X3P58XGNQX","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KDZFRSBQPT2B61X3P58XGNQX
X-Runtime: 0.021502
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
Expires: Fri, 02 Jan 2026 13:53:48 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 13:53:48 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.make.be/users/sign_in">redirected</a>.</body></html>
Open service 2.16.204.21:80 · gitlab.make.be
2025-12-22 11:31
HTTP/1.1 301 Moved Permanently Content-Type: text/html Content-Length: 162 Location: https://gitlab.make.be:443/ Expires: Mon, 22 Dec 2025 11:31:56 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 11:31:56 GMT Connection: close Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 2a02:26f0:3100::1735:2ac0:443 · gitlab.make.be
2025-12-22 11:31
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
Content-Length: 102
Content-Security-Policy:
Location: https://gitlab.make.be/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KD2X90XARSH8FK9AE1VHJV2C","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KD2X90XARSH8FK9AE1VHJV2C
X-Runtime: 0.021501
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
Expires: Mon, 22 Dec 2025 11:31:53 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 22 Dec 2025 11:31:53 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.make.be/users/sign_in">redirected</a>.</body></html>
Open service 2a02:26f0:3100::1735:2ac2:80 · gitlab.make.be
2025-12-22 11:31
HTTP/1.1 301 Moved Permanently Content-Type: text/html Content-Length: 162 Location: https://gitlab.make.be:443/ Expires: Mon, 22 Dec 2025 11:31:57 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 11:31:57 GMT Connection: close Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 2.16.204.23:80 · gitlab.make.be
2025-12-22 11:31
HTTP/1.1 301 Moved Permanently Content-Type: text/html Content-Length: 162 Location: https://gitlab.make.be:443/ Expires: Mon, 22 Dec 2025 11:31:56 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 11:31:56 GMT Connection: close Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 2.16.204.23:443 · gitlab.make.be
2025-12-22 11:31
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
Content-Length: 102
Content-Security-Policy:
Location: https://gitlab.make.be/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KD2X91DKC4QAFDDASEV2GFD7","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KD2X91DKC4QAFDDASEV2GFD7
X-Runtime: 0.020409
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
Expires: Mon, 22 Dec 2025 11:31:54 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 22 Dec 2025 11:31:54 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.make.be/users/sign_in">redirected</a>.</body></html>
Open service 2a02:26f0:3100::1735:2ac0:80 · gitlab.make.be
2025-12-22 11:31
HTTP/1.1 301 Moved Permanently Content-Type: text/html Content-Length: 162 Location: https://gitlab.make.be:443/ Expires: Mon, 22 Dec 2025 11:31:57 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 11:31:57 GMT Connection: close Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 2a02:26f0:3100::1735:2ac2:443 · gitlab.make.be
2025-12-22 11:31
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
Content-Length: 102
Content-Security-Policy:
Location: https://gitlab.make.be/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KD2X91A8JNJY3MZE0VZ87GMJ","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KD2X91A8JNJY3MZE0VZ87GMJ
X-Runtime: 0.020860
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
Expires: Mon, 22 Dec 2025 11:31:54 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 22 Dec 2025 11:31:54 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.make.be/users/sign_in">redirected</a>.</body></html>
Open service 2.16.204.21:443 · gitlab.make.be
2025-12-22 11:31
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
Content-Length: 102
Content-Security-Policy:
Location: https://gitlab.make.be/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KD2X91GYB790CV8QB01YZXZA","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KD2X91GYB790CV8QB01YZXZA
X-Runtime: 0.019842
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
Expires: Mon, 22 Dec 2025 11:31:54 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 22 Dec 2025 11:31:54 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.make.be/users/sign_in">redirected</a>.</body></html>