Remote Code Execution in GitLab 5+

no wonder, it's ruby developer, what can be worse? I'll tell ya - php developer :)