GitLab Product Security Update Advisory (CVE-2026-10053)
A security update has been released to address a vulnerability in GitLab products. The vulnerability is a remote code execution vulnerability (a vulnerability that allows arbitrary code to be executed remotely) caused by a path traversal ( where file paths deviate to unintended locations) in the GitLab CE/EE Package Registry,
GitLab Product Security Update Advisory
Overview A security update has been released to address vulnerabilities in GitLab products. GitLab CE/EE users should update to the latest version with security patches. Affected Products and Versions GitLab CE/EE 18.2 Or later, but earlier than 18.11.11. GitLab CE/EE 19.0 Or later, but earlier than 19.0.8. GitLab CE/EE 19.1
GitLab Product Security Update Advisory
Overview Several vulnerabilities have been identified in GitLab products, and security updates have been released. The affected products are GitLab CE/EE and GitLab EE; users should update to the latest patched version. Resolved Vulnerabilities CVE-2026-15216: Cross-site scripting (XSS; a vulnerability that allows malicious scripts to be injected into web pages)
GitLab Product Security Update Advisory
Overview A security update has been released to address a vulnerability in GitLab products. This vulnerability affects GitLab CE/EE and is resolved by updating to the latest patched version. Identified Vulnerabilities CVE-2026-6267: A sensitive information exposure vulnerability in Workhorse (GitLab’s request-handling component) in GitLab CE/EE. CVE-2026-12436: A CI/CD configuration tampering
GitLab Product Security Update Advisory
A security update has been released to address vulnerabilities found in GitLab products. The vulnerability addressed is CVE-2026-13320, a cross-site scripting (XSS) vulnerability (a vulnerability that allows malicious scripts to be injected into and executed on a web page) in GitLab CE/EE—a cross-site scripting (XSS) vulnerability (a vulnerability that allows
GitLab Product Security Update Advisory
A security update has been released to address vulnerabilities found in GitLab products. The vulnerabilities fixed are as follows: CVE-2026-10086: A cross-site scripting (XSS) vulnerability in GitLab EE (a vulnerability that allows malicious scripts to be injected into web pages). CVE-2026-10712: A cross-site scripting (XSS) vulnerability in GitLab CE/EE. CVE-2026-12053:
GitLab product security update advisory
GitLab has released a security update that addresses multiple vulnerabilities in its products. the targeted vulnerabilities are CVE-2026-6552, CVE-2026-7250, CVE-2026-8589, and CVE-2026-10087. CVE-2026-10087 is a cross-site scripting (XSS) vulnerability in GitLab EE that allows malicious script to be injected into web pages. CVE-2026-6552 is an access control laxity vulnerability in
GitLab product security update advisory
GitLab product security update advisory GitLab has released a security update to address a vulnerability in GitLab EE. Resolved vulnerabilities CVE-2026-4868: An access control flaw in GitLab EE. CVE-2026-7481: A cross-site scripting (XSS) vulnerability in GitLab EE that could allow malicious script to be injected into a web page. Affected
GitLab product security update advisory
Overview A security update has been released to address vulnerabilities in GitLab products. users of these products should update to the latest version of the patch. Affected Products and Versions CVE-2025-14869, CVE-2025-14870: GitLab CE/EE 18.5 and later but not earlier than 18.9.7, 18.10 and later but not earlier than 18.10.6,
GitLab Product Security Update Advisory (CVE-2026-5173)
Overview. A vulnerability (CVE-2026-5173) was reported in the GitLab product that allows server-side method calls due to lack of WebSocket access control. Affected Versions. GitLab CE/EE versions 16.9.6 and above but below 18.8.9 are affected. GitLab CE/EE versions 18.9 and above but below 18.9.5 are affected. GitLab CE/EE versions 18.10
