Issue Summary A vulnerability in the Gitter desktop application resulted in an inadvertent leak of your Gitter tokens. This affects v2 and v3 of the Gitter desktop app which we officially distribute for Windows and Linux. This only affects macOS if you manually downloaded v2/v3 (we distribute v1.177 on https://gitter.im/apps). Thanks to Dale Higgs for responsibly disclosing this vulnerability [https://about.gitlab.com/disclosure/] to us. Your tokens have already been…

Issue Summary An XSS exploit in our KaTeX parser [https://gitlab.com/gitlab-org/gitter/webapp/issues/1859] was used to embed a JavaScript crypto miner in clients via an exploitative message. The exploitative message was spread across 25 rooms and 146 users read those messages. The messages were available for about 1 hour (minutes after being reported [https://gitlab.com/gitlab-org/gitter/webapp/issues/1860]) before being cleaned up across the board. User Remediation Steps To…