Improper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to view and delete impersonation tokens that administrators created for their account
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-22250.json"