GitLab security advisories

68 advisories across GitLab

Date	Advisory	Severity	Fixed in
Sep 24	GitLab: code execution Critical9.9Sep 24 CVE-2026-8907819.2.7+2 more	Critical9.9	19.2.7+2 more
Sep 24	GitLab: missing authorization High7.7Sep 24 CVE-2026-9247019.2.7+2 more	High7.7	19.2.7+2 more
Sep 24	GitLab: improper authorization Medium4.3Sep 24 CVE-2026-9252919.2.7+2 more	Medium4.3	19.2.7+2 more
Sep 24	GitLab: authenticated user could spoof merge request authorship Medium4.3Sep 24 CVE-2026-9253019.2.7+2 more	Medium4.3	19.2.7+2 more
Sep 24	GitLab: race condition Low3.1Sep 24 CVE-2026-9262819.2.7+2 more	Low3.1	19.2.7+2 more
Sep 24	GitLab: improper authorization Medium5.4Sep 24 CVE-2026-9287419.2.7+2 more	Medium5.4	19.2.7+2 more
Sep 24	GitLab: code execution Critical9.9Sep 24 CVE-2026-9357719.2.7+2 more	Critical9.9	19.2.7+2 more
Sep 16	GitLab: improper access control Medium4.4Sep 16 CVE-2026-8634119.1.8+2 more	Medium4.4	19.1.8+2 more
Sep 16	GitLab: improper authorization Medium4.3Sep 16 CVE-2026-751419.1.8+2 more	Medium4.3	19.1.8+2 more
Sep 16	GitLab: cross-site scripting High8.2Sep 16 CVE-2026-7825219.1.8+2 more	High8.2	19.1.8+2 more
Sep 16	GitLab: improper authorization High8.5Sep 16 CVE-2026-7970819.1.8+2 more	High8.5	19.1.8+2 more
Sep 16	GitLab: missing authorization Medium4.3Sep 16 CVE-2026-803019.1.8+2 more	Medium4.3	19.1.8+2 more
Sep 16	GitLab: denial of service High7.5Sep 16 CVE-2026-116819.1.8+2 more	High7.5	19.1.8+2 more
Sep 16	GitLab: cross-site scripting Medium4.7Sep 16 CVE-2026-1961919.1.8+2 more	Medium4.7	19.1.8+2 more
Sep 16	GitLab: denial of service Low3.1Sep 16 CVE-2026-385519.1.8+2 more	Low3.1	19.1.8+2 more
Sep 16	GitLab: denial of service High7.5Sep 16 CVE-2025-1487119.1.8+2 more	High7.5	19.1.8+2 more
Sep 16	GitLab: improper authorization Medium4.3Sep 16 CVE-2026-1679419.1.8+2 more	Medium4.3	19.1.8+2 more
Sep 16	GitLab: race condition Medium6.4Sep 16 CVE-2024-1122219.1.8+2 more	Medium6.4	19.1.8+2 more
Sep 15	GitLab: remote code execution High8.5Sep 15 CVE-2026-8876519.1.8+2 more	High8.5	19.1.8+2 more
Sep 15	GitLab: improper authorization Medium5.3Sep 15 CVE-2026-8283719.1.8+2 more	Medium5.3	19.1.8+2 more
Sep 15	GitLab: missing authentication Medium5.4Sep 15 CVE-2026-1291019.1.8+2 more	Medium5.4	19.1.8+2 more
Sep 15	GitLab: improper input validation High7.7Sep 15 CVE-2026-1321019.1.8+2 more	High7.7	19.1.8+2 more
Sep 12	GitLab: unsafe deserialization Critical9.9Sep 12 CVE-2026-8771918.11.12+3 more	Critical9.9	18.11.12+3 more
Sep 12	GitLab: missing authentication Critical10.0Sep 12 CVE-2026-8570618.11.12+3 more	Critical10.0	18.11.12+3 more
Aug 27	GitLab AI Gateway: server-side request forgery High8.2Aug 27 CVE-2026-7587119.0.12+2 more	High8.2	19.0.12+2 more
Aug 27	GitLab AI Gateway: server-side request forgery High8.2Aug 27 CVE-2026-1988919.0.12+2 more	High8.2	19.0.12+2 more
Aug 26	GitLab: improper authorization Low3.5Aug 26 CVE-2026-748719.1.7+2 more	Low3.5	19.1.7+2 more
Aug 26	GitLab: denial of service Medium6.5Aug 26 CVE-2026-7780119.1.7+2 more	Medium6.5	19.1.7+2 more
Aug 26	GitLab: improper authorization Medium5.5Aug 26 CVE-2026-303519.1.7+2 more	Medium5.5	19.1.7+2 more
Aug 26	GitLab: untrusted functionality included High7.3Aug 26 CVE-2026-1825219.1.7+2 more	High7.3	19.1.7+2 more
Aug 26	GitLab has remediated an issue in GitLab EE affecting all versions from 19.1... Medium4.3Aug 26 CVE-2026-1538719.1.7+2 more	Medium4.3	19.1.7+2 more
Aug 26	GitLab: denial of service Medium6.5Aug 26 CVE-2025-1090319.1.7+2 more	Medium6.5	19.1.7+2 more
Aug 23	GitLab: remote code execution High8.5Aug 23 CVE-2026-1005319.0.6+2 more	High8.5	19.0.6+2 more
Aug 17	GitLab: code injection Critical9.4Aug 17 CVE-2026-1947818.11.11+3 more	Critical9.4	18.11.11+3 more
Aug 17	GitLab: cross-site request forgery High7.1Aug 17 CVE-2026-1965018.11.11+3 more	High7.1	18.11.11+3 more
Aug 12	GitLab: missing authorization Medium4.3Aug 12 CVE-2026-682119.0.6+2 more	Medium4.3	19.0.6+2 more
Aug 12	GitLab: missing authorization Medium4.3Aug 12 CVE-2026-487919.0.6+2 more	Medium4.3	19.0.6+2 more
Aug 12	GitLab: improper authorization High8.5Aug 12 CVE-2026-1922819.1.4+1 more	High8.5	19.1.4+1 more
Aug 12	GitLab: improper authorization Medium4.3Aug 12 CVE-2026-1843319.1.4+1 more	Medium4.3	19.1.4+1 more
Aug 12	GitLab: missing authorization High7.1Aug 12 CVE-2026-1649419.1.4+1 more	High7.1	19.1.4+1 more
Aug 12	GitLab: cross-site scripting High8.7Aug 12 CVE-2026-1521619.0.6+2 more	High8.7	19.0.6+2 more
Aug 12	GitLab: cross-site scripting High8.7Aug 12 CVE-2026-1521719.0.6+2 more	High8.7	19.0.6+2 more
Aug 12	GitLab: user could receive permissions granted Low3.3Aug 12 CVE-2025-948619.0.6+2 more	Low3.3	19.0.6+2 more
Aug 12	GitLab: denial of service Medium5.3Aug 12 CVE-2026-742719.0.6+2 more	Medium5.3	19.0.6+2 more
Aug 12	GitLab: improper authorization Medium4.3Aug 12 CVE-2026-866719.0.6+2 more	Medium4.3	19.0.6+2 more
Aug 12	GitLab: improper authorization Medium4.3Aug 12 CVE-2026-1824419.0.6+2 more	Medium4.3	19.0.6+2 more
Aug 12	GitLab: privilege escalation High7.7Aug 12 CVE-2026-1662719.2.2	High7.7	19.2.2
Aug 12	GitLab: improper authorization High8.5Aug 12 CVE-2026-1542319.0.6+2 more	High8.5	19.0.6+2 more
Jul 29	GitLab: information disclosure High8.5Jul 29 CVE-2026-626719.0.5+2 more	High8.5	19.0.5+2 more
Jul 29	GitLab: missing authorization Medium5.3Jul 29 CVE-2026-633619.0.5+2 more	Medium5.3	19.0.5+2 more
Jul 29	GitLab: cross-site scripting Medium4.7Jul 29 CVE-2026-309319.0.5+2 more	Medium4.7	19.0.5+2 more
Jul 29	GitLab: improper access control Medium4.3Jul 29 CVE-2026-467219.0.5+2 more	Medium4.3	19.0.5+2 more
Jul 29	GitLab: denial of service High7.5Jul 29 CVE-2026-1597519.0.5+2 more	High7.5	19.0.5+2 more
Jul 29	GitLab: information disclosure Medium5.4Jul 29 CVE-2026-1655319.0.5+2 more	Medium5.4	19.0.5+2 more
Jul 29	GitLab: improper authorization Medium4.9Jul 29 CVE-2026-1434119.0.5+2 more	Medium4.9	19.0.5+2 more
Jul 29	GitLab: improper authorization Medium4.3Jul 29 CVE-2026-1435119.0.5+2 more	Medium4.3	19.0.5+2 more
Jul 29	GitLab: authenticated user could access information Medium4.3Jul 29 CVE-2026-1507719.1.3+1 more	Medium4.3	19.1.3+1 more
Jul 29	GitLab: improper authorization Medium4.3Jul 29 CVE-2026-1583119.1.3+1 more	Medium4.3	19.1.3+1 more
Jul 29	GitLab: improper authorization Low3.1Jul 29 CVE-2025-1456219.0.5+2 more	Low3.1	19.0.5+2 more
Jul 29	GitLab: mass assignment High8.4Jul 29 CVE-2026-1243619.0.5+2 more	High8.4	19.0.5+2 more

The newest 60. Each project page has the full list.

About GitLab

GitLab is a software forge primarily developed by GitLab Inc. It is available as either a free software "Community" edition or a proprietary software "Enterprise" edition.

Elsewhere on fru.dev: Quarterly · Paydays · Releases

Critical advisories by email