---
title: Ensure group and project memberships are not leaked via API for users with private profiles
merge_request:
author:
type: security