GitLab Product Security Update Advisory
Overview Security updates addressing vulnerabilities in GitLab products have been released. These updates apply to GitLab CE/EE, and the affected CVEs vary depending on the version in use. Resolved Vulnerabilities CVE-2026-89078: A double-free vulnerability in the regular expression parser (the component that processes regular expressions) of GitLab CE/EE. CVE-2026-93577: An
GitLab Product Security Update Advisory
A security update has been released to address several vulnerabilities in GitLab products. The affected products are GitLab CE/EE and GitLab AI Gateway. The vulnerabilities in GitLab CE/EE include the following: CVE-2026-14814: Insufficient regular expression validation vulnerability. CVE-2026-16301: Inappropriate authorization vulnerability. CVE-2026-92883: XSS vulnerability (a vulnerability where malicious scripts are
GitLab Product Security Update Advisory (CVE-2026-85706)
A security update addressing vulnerabilities in GitLab products has been released. The resolved vulnerability is CVE-2026-85706, an arbitrary file read vulnerability caused through path traversal (an attack that manipulates file paths beyond the permitted directory scope) in the GitLab CE/EE repository commit API. The affected versions are as follows: GitLab
GitLab Product Security Update Advisory (CVE-2026-10053)
A security update has been released to address a vulnerability in GitLab products. The vulnerability is a remote code execution vulnerability (a vulnerability that allows arbitrary code to be executed remotely) caused by a path traversal ( where file paths deviate to unintended locations) in the GitLab CE/EE Package Registry,
GitLab Product Security Update Advisory
Overview A security update has been released to address vulnerabilities in GitLab products. GitLab CE/EE users should update to the latest version with security patches. Affected Products and Versions GitLab CE/EE 18.2 Or later, but earlier than 18.11.11. GitLab CE/EE 19.0 Or later, but earlier than 19.0.8. GitLab CE/EE 19.1
GitLab Product Security Update Advisory
Overview Several vulnerabilities have been identified in GitLab products, and security updates have been released. The affected products are GitLab CE/EE and GitLab EE; users should update to the latest patched version. Resolved Vulnerabilities CVE-2026-15216: Cross-site scripting (XSS; a vulnerability that allows malicious scripts to be injected into web pages)
GitLab Product Security Update Advisory
Overview A security update has been released to address a vulnerability in GitLab products. This vulnerability affects GitLab CE/EE and is resolved by updating to the latest patched version. Identified Vulnerabilities CVE-2026-6267: A sensitive information exposure vulnerability in Workhorse (GitLab’s request-handling component) in GitLab CE/EE. CVE-2026-12436: A CI/CD configuration tampering
GitLab Product Security Update Advisory
A security update has been released to address vulnerabilities found in GitLab products. The vulnerability addressed is CVE-2026-13320, a cross-site scripting (XSS) vulnerability (a vulnerability that allows malicious scripts to be injected into and executed on a web page) in GitLab CE/EE—a cross-site scripting (XSS) vulnerability (a vulnerability that allows
GitLab Product Security Update Advisory
A security update has been released to address vulnerabilities found in GitLab products. The vulnerabilities fixed are as follows: CVE-2026-10086: A cross-site scripting (XSS) vulnerability in GitLab EE (a vulnerability that allows malicious scripts to be injected into web pages). CVE-2026-10712: A cross-site scripting (XSS) vulnerability in GitLab CE/EE. CVE-2026-12053:
GitLab product security update advisory
GitLab has released a security update that addresses multiple vulnerabilities in its products. the targeted vulnerabilities are CVE-2026-6552, CVE-2026-7250, CVE-2026-8589, and CVE-2026-10087. CVE-2026-10087 is a cross-site scripting (XSS) vulnerability in GitLab EE that allows malicious script to be injected into web pages. CVE-2026-6552 is an access control laxity vulnerability in
