Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitLab 18.11.11, 19.0.8 and 2 more versions Clear all filters
TI-2026-15957 CVE-2026-19650 · GHSA-78mw-f4q2-924q

Cross-Site Request Forgery (CSRF) in GitLab

Priority LOW 31

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could have allowed an unauthen…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00212 Published 2026-08-17 Fixed in 18.11.11, 19.0.8 +2 CWE-352
TI-2026-15862 CVE-2026-19478 · GHSA-6whr-xjjm-6pf8

Improper Control of Generation of Code ('Code Injection') in GitLab

Priority MEDIUM 51

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.02155 Published 2026-08-17 Fixed in 18.11.11, 19.0.8 +2 CWE-94