Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: GitLab 19.2.7, 19.3.3, 19.4.1 Clear all filters
TI-2026-60363 CVE-2026-89078 · GHSA-9chr-4x58-948m

Double Free in GitLab

Priority MEDIUM 43

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00522 Published 2026-09-23 Partial fix · 19.2.7, 19.3.3 +1 CWE-415
TI-2026-62414 CVE-2026-92530 · GHSA-wr3r-jhmc-f6jw

Use of Less Trusted Source in GitLab

Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to spoof me…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00109 Published 2026-09-23 Fixed in 19.2.7, 19.3.3 +1 CWE-348
TI-2026-62356 CVE-2026-92470 · GHSA-f2v3-pf6x-rw2j

Missing Authorization in GitLab

Priority LOW 33

GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to access sens…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00209 Published 2026-09-23 Fixed in 19.2.7, 19.3.3 +1 CWE-862
TI-2026-62413 CVE-2026-92529 · GHSA-cfwp-mfvj-r9jm

Incorrect Authorization in GitLab

Priority LOW 19

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with developer…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0018 Published 2026-09-23 Fixed in 19.2.7, 19.3.3 +1 CWE-863
TI-2026-62568 CVE-2026-92874 · GHSA-c3rm-3hqr-4qwm

Incorrect Authorization in GitLab

Priority LOW 23

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with an MCP…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00146 Published 2026-09-23 Fixed in 19.2.7, 19.3.3 +1 CWE-863
TI-2026-62473 CVE-2026-92628 · GHSA-vp7f-562j-4qgr

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLab

Priority LOW 14

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race condition, the MCP search tool's shared state handling could hav…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00144 Published 2026-09-23 Fixed in 19.2.7, 19.3.3 +1 CWE-362
TI-2026-63046 CVE-2026-93577 · GHSA-wqwg-376r-c226

Integer Overflow or Wraparound in GitLab

Priority MEDIUM 44

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0063 Published 2026-09-23 Partial fix · 19.2.7, 19.3.3 +1 CWE-190