Priority LOW 19
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package file…
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.0019 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 19
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with repo…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00217 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 26
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controll…
CVSS 3.1MEDIUM 5.8· Network · Low privileges · User interaction · EPSS 0.00293 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-601
Priority LOW 19
GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with limited…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00184 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 19
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a p…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00219 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-1220
Priority LOW 19
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Gues…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00217 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 38
GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw…
CVSS 3.1HIGH 8.2· Network · Low privileges · No interaction · EPSS 0.00386 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-625
Priority LOW 30
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00263 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 37
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Deve…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00335 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 19
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a…
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.0019 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 35
GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute a…
CVSS 3.1HIGH 7.7· Network · Low privileges · User interaction · EPSS 0.00279 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 15
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a fi…
CVSS 3.1LOW 3.1· Network · Low privileges · No interaction · EPSS 0.00214 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 29
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00222 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 19
GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to approve…
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.00131 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority MEDIUM 40
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execut…
CVSS 3.1HIGH 8.7· Network · Low privileges · User interaction · EPSS 0.00478 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-79
Priority CRITICAL 100KEV
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to exec…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.6522 · Published 2026-10-13 · Partial fix · 19.2.8, 19.3.5 +1 CWE-190
Priority LOW 35
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject sp…
CVSS 3.1HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00584 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-1427
Priority LOW 16
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to perfor…
CVSS 3.1LOW 3.5· Network · Low privileges · No interaction · EPSS 0.00197 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-918
Priority LOW 20
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configurations, could have allowed an authenticated…
CVSS 3.1MEDIUM 4.6· Network · Low privileges · User interaction · EPSS 0.00092 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-349
Priority LOW 27
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with acce…
CVSS 3.1MEDIUM 6.2· Adjacent network · High privileges · No interaction · EPSS 0.00157 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-532
Priority LOW 13
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with main…
CVSS 3.1LOW 2.7· Network · High privileges · No interaction · EPSS 0.00234 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 19
GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a cu…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00184 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-266
Priority LOW 19
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a sp…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00192 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-807