Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: GitLab 19.1.8, 19.2.6, 19.3.2 Clear all filters
TI-2026-10999 CVE-2026-12910 · GHSA-q9w7-g33h-p2jw

Missing Authentication for Critical Function in GitLab

Priority LOW 24

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to bypass S…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0034 Published 2026-09-15 Fixed in 19.1.8, 19.2.6 +1 CWE-306
TI-2026-11216 CVE-2026-13210 · GHSA-48pf-wfrv-7pv2

Incorrect Authorization in GitLab

Priority LOW 34

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to access C…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00354 Published 2026-09-15 Fixed in 19.1.8, 19.2.6 +1 CWE-863
TI-2026-57144 CVE-2026-82837 · GHSA-2gcw-p589-35qf

Insertion of Sensitive Information Into Sent Data in GitLab

Priority LOW 30

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that certain conditions could have allowed an authenticated user to access sensi…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0023 Published 2026-09-15 Fixed in 19.1.8, 19.2.6 +1 CWE-201
TI-2026-60192 CVE-2026-88765 · GHSA-f5mm-69gv-w857

Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 under certain conditions could allow an authenticated user to achieve remote code executi…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00675 Published 2026-09-15 Fixed in 19.1.8, 19.2.6 +1 CWE-77