An upstream Gerrit vulnerability was recently found and fixed. The SPDK Gerrit
configuration has been updated to mitigate the vulnerability for now. We are in the
process of upgrading our Gerrit installation to a version that includes the full fix and
expect that to be done by tomorrow morning.
Since we are using the GitHub oauth plugin, it is recommended that anyone with an account
on the SPDK Gerrit site update their GitHub credentials.
More information on the Gerrit vulnerability can be found in the Gerrit 3.2.5 release