In all versions of GitLab CE/EE since version 8.9, project exports may expose trigger tokens configured on that project.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-39869.json"