https://allelesecurity.com/asa-2018-00090/
ASA-2018-00090 - GitLab: Arbitrary file read in project import with Git LFS