Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: GitLab 19.1.4, 19.2.2 Clear all filters
TI-2026-13775 CVE-2026-16494 · GHSA-gww4-7jfh-v6mj

Missing Authorization in GitLab

Priority LOW 32

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to modify project settings restrict…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00425 Published 2026-08-12 Fixed in 19.1.4, 19.2.2 CWE-862
TI-2026-15148 CVE-2026-18433 · GHSA-3vq6-w6gp-xpph

Incorrect Authorization in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to read policy configuration belong…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00389 Published 2026-08-12 Fixed in 19.1.4, 19.2.2 CWE-863
TI-2026-15699 CVE-2026-19228 · GHSA-7q96-xw9j-34hj

Authorization Bypass Through User-Controlled Key in GitLab

Priority LOW 37

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to cause AI usage to be attributed…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00352 Published 2026-08-12 Fixed in 19.1.4, 19.2.2 CWE-639