Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitLab 19.1.3, 19.2.1 Clear all filters
TI-2026-12692 CVE-2026-15077 · GHSA-349h-ggfr-h55v

Improper Neutralization of Input Used for LLM Prompting in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to access information from unauthor…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00313 Published 2026-07-29 Fixed in 19.1.3, 19.2.1 CWE-1427
TI-2026-13312 CVE-2026-15831 · GHSA-w973-7qcg-m257

Generation of Incorrect Security Tokens in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to bypass administrator-configured…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.003 Published 2026-07-29 Fixed in 19.1.3, 19.2.1 CWE-1270