Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitLab 18.11.12, 19.0.9 and 3 more versions Clear all filters
TI-2026-58817 CVE-2026-85706 · GHSA-f47w-mrg9-g9p2

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

Priority CRITICAL 100KEV

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unaut…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.97355 Published 2026-09-12 Fixed in 18.11.12, 19.0.9 +3 CWE-22
TI-2026-59880 CVE-2026-87719 · GHSA-prp4-5w2g-8v2c

Deserialization of Untrusted Data in GitLab

Priority MEDIUM 44

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could allow a…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00571 Published 2026-09-12 Fixed in 18.11.12, 19.0.9 +3 CWE-502