Description:
GitLab has released 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3 and 19.5.1 to address multiple vulnerabilities in various versions of GitLab.
Affected Systems:
- GitLab Community Edition (CE) prior to versions 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3 and 19.5.1
- GitLab Enterprise Edition (EE) prior to versions 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3 and 19.5.1
For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.
Impact:
Successful exploitation of the vulnerabilities could lead to remote code execution, information disclosure or security restriction bypass on an affected system.
Recommendation:
Patches for affected systems are now available. System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.
More Information:
- https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
- https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20261022
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-12664
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13319
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14288
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15723
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16255
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103515
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105711
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105777
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-110264
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112212
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112326
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112378
