{"schema_version":"1","data":[{"id":52700,"advisory_id":"798040b7-db16-4482-bb06-c04457a70b83","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-15723","source_published_at":"2026-10-21T23:35:15.434+00:00","published_at":"2026-10-25T14:49:29.017515+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-15723"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAuth SAML and LDAP auto-linking were both enabled, an authenticated user could have taken over an existing LDAP-backed account without any interaction from the targeted user, due to improper input sanitization in the LDAP email lookup path used during OmniAuth identity linking.","evidence":"cve:CVE-2026-15723","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-15723","aliases":["CVE-2026-15723"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"10.1","lessThan":"19.3.6","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.3","versionType":"semver"},{"status":"affected","version":"19.5","lessThan":"19.5.1","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-23T10:58:00.648Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/605977","https://hackerone.com/reports/3852192","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-15723","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-23T03:55:20.114357Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-23T10:58:00.648Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-21T23:35:15.434Z"}}},"related_cves":[{"value":"CVE-2026-15723","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"context_update":false},{"id":52699,"advisory_id":"0e32b377-28dd-4d8a-ab6a-06a63b2311bb","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-12664","source_published_at":"2026-10-21T23:35:30.436+00:00","published_at":"2026-10-25T14:49:28.285226+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-12664"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Incorrect Authorization in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with a read_api-scoped token to retrieve a project's incoming email address and create work items, bypassing the token's restrictions, due to insufficient scope enforcement on a GraphQL field.","evidence":"cve:CVE-2026-12664","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-12664","aliases":["CVE-2026-12664"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.8,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"18.2","lessThan":"19.3.6","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.3","versionType":"semver"},{"status":"affected","version":"19.5","lessThan":"19.5.1","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-23T10:58:25.345Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/603510","https://hackerone.com/reports/3735499","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-12664","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-23T03:55:19.309171Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-23T10:58:25.345Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-21T23:35:30.436Z"}}},"related_cves":[{"value":"CVE-2026-12664","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":52470,"advisory_id":"adbc33bd-512d-4529-a79c-5f6cc29fe6b8","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110264","source_published_at":"2026-10-22T00:33:48.179+00:00","published_at":"2026-10-25T14:45:08.495603+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-110264"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Integer Overflow or Wraparound in GitLab","summary":"An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.","evidence":"cve:CVE-2026-110264","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-110264","aliases":["CVE-2026-110264"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":10,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"7.0","lessThan":"18.11.13","versionType":"semver"},{"status":"affected","version":"19.0","lessThan":"19.0.10","versionType":"semver"},{"status":"affected","version":"19.1","lessThan":"19.1.9","versionType":"semver"},{"status":"affected","version":"19.2","lessThan":"19.2.9","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.6","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.3","versionType":"semver"},{"status":"affected","version":"19.5","lessThan":"19.5.1","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-22T23:05:04.898Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/633633","https://hackerone.com/reports/4093475","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-110264","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-21T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-22T23:05:04.898Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-22T00:33:48.179Z"}}},"related_cves":[{"value":"CVE-2026-110264","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"context_update":false},{"id":50229,"advisory_id":"c1c601e6-a8df-442d-8a88-7e23e30f411c","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84284","source_published_at":"2026-10-13T01:06:56.17+00:00","published_at":"2026-10-25T14:02:57.595988+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-84284"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Incorrect Authorization in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, 19.3 before 19.3.6, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read work item contents from private groups and projects due to incorrect authorization checks.","evidence":"cve:CVE-2026-84284","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-84284","aliases":["CVE-2026-84284"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"17.11","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.6","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-22T11:14:53.647Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/627167","https://hackerone.com/reports/3551698","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-84284","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T19:11:56.764013Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T19:12:10.482Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-22T11:14:53.647Z"}}},"related_cves":[{"value":"CVE-2026-84284","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":50029,"advisory_id":"0fcecb44-2022-41e2-b43a-40a094e97830","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-16255","source_published_at":"2026-10-21T23:35:10.428+00:00","published_at":"2026-10-25T13:59:41.372759+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-16255"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Incorrect Authorization in GitLab","summary":"GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the instance-wide SAML or LDAP membership lock was enabled, an authenticated user could have granted or accepted project and group membership outside the identity provider's control, due to incomplete enforcement of the membership lock on requests created before the lock was enabled.","evidence":"cve:CVE-2026-16255","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-16255","aliases":["CVE-2026-16255"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"12.0","lessThan":"19.3.6","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.3","versionType":"semver"},{"status":"affected","version":"19.5","lessThan":"19.5.1","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-21T23:35:10.428Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/606479","https://hackerone.com/reports/3809350","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/"],"provider_metadata":{"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-21T23:35:10.428Z"}}},"related_cves":[{"value":"CVE-2026-16255","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":50028,"advisory_id":"4ae51a39-a393-405d-9ea0-2796fd22de92","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-14288","source_published_at":"2026-10-21T23:35:20.426+00:00","published_at":"2026-10-25T13:59:40.709412+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-14288"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Use of Incorrectly-Resolved Name or Reference in GitLab","summary":"GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a protected branch due to improper access control during approval rule synchronization.","evidence":"cve:CVE-2026-14288","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-14288","aliases":["CVE-2026-14288"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.1,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"17.4","lessThan":"19.3.6","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.3","versionType":"semver"},{"status":"affected","version":"19.5","lessThan":"19.5.1","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-21T23:35:20.426Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/604630","https://hackerone.com/reports/3797008","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/"],"provider_metadata":{"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-21T23:35:20.426Z"}}},"related_cves":[{"value":"CVE-2026-14288","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"low"},"context_update":false},{"id":50027,"advisory_id":"23062f81-fc1c-4fd9-915c-20839801afce","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-13319","source_published_at":"2026-10-21T23:35:25.44+00:00","published_at":"2026-10-25T13:59:39.572479+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-13319"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Authorization Bypass Through User-Controlled Key in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authenticated to read milestone metadata, including titles, descriptions, and full project paths, from arbitrary private projects across the instance without any project membership, due to missing authorization checks on a user-supplied project filter parameter in the group milestones API.","evidence":"cve:CVE-2026-13319","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-13319","aliases":["CVE-2026-13319"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"15.10","lessThan":"19.3.6","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.3","versionType":"semver"},{"status":"affected","version":"19.5","lessThan":"19.5.1","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-21T23:35:25.440Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/604064","https://hackerone.com/reports/3792168","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/"],"provider_metadata":{"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-21T23:35:25.440Z"}}},"related_cves":[{"value":"CVE-2026-13319","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":50026,"advisory_id":"8bc33afe-89f2-4a3e-8fc6-0b2c86c60f86","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112378","source_published_at":"2026-10-21T23:33:50.429+00:00","published_at":"2026-10-25T13:59:38.629218+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-112378"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Use of Less Trusted Source in GitLab","summary":"GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid AI features without a valid subscription due to insufficient server-side validation in billing eligibility checks.","evidence":"cve:CVE-2026-112378","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-112378","aliases":["CVE-2026-112378"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"17.8","lessThan":"19.3.6","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.3","versionType":"semver"},{"status":"affected","version":"19.5","lessThan":"19.5.1","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-21T23:33:50.429Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/634027","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/"],"provider_metadata":{"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-21T23:33:50.429Z"}}},"related_cves":[{"value":"CVE-2026-112378","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":50025,"advisory_id":"a32304b7-172d-4502-8d3e-44bf6e541a8b","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112326","source_published_at":"2026-10-21T23:33:40.603+00:00","published_at":"2026-10-25T13:59:37.477569+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-112326"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Improper Cleanup on Thrown Exception in GitLab","summary":"GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with read-only permissions to permanently delete existing vulnerability records due to improper cleanup logic that failed to distinguish between pre-existing records from newly created ones during error handling.","evidence":"cve:CVE-2026-112326","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-112326","aliases":["CVE-2026-112326"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.1,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"17.8","lessThan":"19.3.6","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.3","versionType":"semver"},{"status":"affected","version":"19.5","lessThan":"19.5.1","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-21T23:33:40.603Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/633147","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/"],"provider_metadata":{"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-21T23:33:40.603Z"}}},"related_cves":[{"value":"CVE-2026-112326","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"low"},"context_update":false},{"id":50024,"advisory_id":"dfcb327f-677e-4730-8fce-1d333d6edeac","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112212","source_published_at":"2026-10-21T23:33:45.429+00:00","published_at":"2026-10-25T13:59:36.666221+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-112212"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have poisoned a shared cache's OAuth/OIDC discovery document to redirect certain flows to an externally controlled server, due to improper trust of user-supplied values when constructing endpoint URLs in cached discovery responses.","evidence":"cve:CVE-2026-112212","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-112212","aliases":["CVE-2026-112212"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"18.3","lessThan":"19.3.6","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.3","versionType":"semver"},{"status":"affected","version":"19.5","lessThan":"19.5.1","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-21T23:33:45.429Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/627499","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/"],"provider_metadata":{"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-21T23:33:45.429Z"}}},"related_cves":[{"value":"CVE-2026-112212","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"context_update":false},{"id":50023,"advisory_id":"69cc262d-df24-40c2-a08a-52f8d570be5f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-105777","source_published_at":"2026-10-21T23:34:25.44+00:00","published_at":"2026-10-25T13:59:35.921898+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-105777"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Insertion of Sensitive Information Into Sent Data in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have retrieved sensitive internal server credentials due to improper filtering of internal response headers.","evidence":"cve:CVE-2026-105777","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-105777","aliases":["CVE-2026-105777"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"17.6.5","lessThan":"19.3.6","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.3","versionType":"semver"},{"status":"affected","version":"19.5","lessThan":"19.5.1","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-21T23:34:25.440Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/597022","https://hackerone.com/reports/3657282","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/"],"provider_metadata":{"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-21T23:34:25.440Z"}}},"related_cves":[{"value":"CVE-2026-105777","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":50022,"advisory_id":"b333561d-08d7-4172-a742-1cacf7e55c2d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-105711","source_published_at":"2026-10-21T23:34:30.427+00:00","published_at":"2026-10-25T13:59:34.875233+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-105711"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Use of Cache Containing Sensitive Information in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue from a private project, an authenticated user with no project membership could have read the confidential issue's title, due to a viewer-independent fragment cache key that incorrectly shared per-user-redacted rendered content across all users.","evidence":"cve:CVE-2026-105711","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-105711","aliases":["CVE-2026-105711"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.5,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"15.0","lessThan":"19.3.6","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.3","versionType":"semver"},{"status":"affected","version":"19.5","lessThan":"19.5.1","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-21T23:34:30.427Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/632207","https://hackerone.com/reports/3963293","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/"],"provider_metadata":{"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-21T23:34:30.427Z"}}},"related_cves":[{"value":"CVE-2026-105711","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"low"},"context_update":false},{"id":50021,"advisory_id":"c5442e9f-3790-4021-b56b-5c295a85aacf","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103515","source_published_at":"2026-10-21T23:34:45.429+00:00","published_at":"2026-10-25T13:59:34.118745+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-103515"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Incorrect Authorization in GitLab","summary":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an instance administrator locked a group's Duo availability, an authenticated user with group Owner permissions could have re-enabled AI-backed data egress to a third-party service for that group and its descendant projects, due to insufficient granularity of the admin-lock enforcement controls.","evidence":"cve:CVE-2026-103515","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-103515","aliases":["CVE-2026-103515"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":2.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"19.2","lessThan":"19.3.6","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.3","versionType":"semver"},{"status":"affected","version":"19.5","lessThan":"19.5.1","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-21T23:34:45.429Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/631564","https://hackerone.com/reports/3871692","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/"],"provider_metadata":{"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-21T23:34:45.429Z"}}},"related_cves":[{"value":"CVE-2026-103515","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"low"},"context_update":false},{"id":32915,"advisory_id":"c31efa8d-a931-4dd4-8ef9-c59b95c9560d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-82632","source_published_at":"2026-10-13T01:07:11.167+00:00","published_at":"2026-10-25T08:57:38.016405+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-82632"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Incorrect Authorization in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a fine-grained Personal Access Token scoped only to user-boundary import permissions to import projects into group namespaces beyond the token's intended scope, due to incorrect authorization of the import target namespace.","evidence":"cve:CVE-2026-82632","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-82632","aliases":["CVE-2026-82632"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.1,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"18.9","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-16T18:00:51.552Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/626041","https://hackerone.com/reports/3843143","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-82632","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-16T18:00:21.415544Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-16T18:00:51.552Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:07:11.167Z"}}},"related_cves":[{"value":"CVE-2026-82632","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"low"},"context_update":false},{"id":32913,"advisory_id":"50406efc-8c61-41b6-af3a-7cbc66312c31","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-78335","source_published_at":"2026-10-13T01:08:01.174+00:00","published_at":"2026-10-25T08:57:36.66262+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-78335"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Incorrect Authorization in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a project-scoped fine-grained Personal Access Token to modify integrations belonging to a group outside the token's scope, due to incorrect authorization checks.","evidence":"cve:CVE-2026-78335","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-78335","aliases":["CVE-2026-78335"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.2,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"19.1","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-16T18:05:31.031Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/621535","https://hackerone.com/reports/3893467","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-78335","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-16T18:05:09.318797Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-16T18:05:31.031Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:08:01.174Z"}}},"related_cves":[{"value":"CVE-2026-78335","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":23069,"advisory_id":"34c2f1f2-39ca-460d-b85c-1713028462f0","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-16301","source_published_at":"2026-10-13T01:08:11.162+00:00","published_at":"2026-10-25T06:12:43.784016+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-16301"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Incorrect Authorization in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper authorization checks in the downstream pipeline creation service.","evidence":"cve:CVE-2026-16301","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-16301","aliases":["CVE-2026-16301"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"18.7","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T19:25:42.569Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/606501","https://hackerone.com/reports/3853866","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-16301","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T19:25:30.214475Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T19:25:42.569Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:08:11.162Z"}}},"related_cves":[{"value":"CVE-2026-16301","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"context_update":false},{"id":23053,"advisory_id":"2be6b10c-5022-48a3-b130-12347e7fb296","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92883","source_published_at":"2026-10-13T01:05:51.167+00:00","published_at":"2026-10-25T06:12:32.829141+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-92883"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users' browser sessions via a specially crafted repository, due to improper sanitization of HTML attributes in syntax-highlighted output.","evidence":"cve:CVE-2026-92883","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-92883","aliases":["CVE-2026-92883"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"19.1","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T19:13:38.570Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/629523","https://hackerone.com/reports/3936831","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-92883","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-14T19:13:29.537743Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T19:13:38.570Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:05:51.167Z"}}},"related_cves":[{"value":"CVE-2026-92883","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"context_update":false},{"id":23051,"advisory_id":"da6cb9bf-abce-4ff9-bf03-e55c39c63799","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92528","source_published_at":"2026-10-13T01:06:01.171+00:00","published_at":"2026-10-25T06:12:31.639608+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-92528"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Incorrect Authorization in GitLab","summary":"GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to approve a merge request despite having contributed commits to it, due to improper identity resolution.","evidence":"cve:CVE-2026-92528","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-92528","aliases":["CVE-2026-92528"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.2,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"16.11","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T19:13:09.114Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/606772","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-92528","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T19:12:58.219818Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T19:13:09.114Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:06:01.171Z"}}},"related_cves":[{"value":"CVE-2026-92528","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":23050,"advisory_id":"9bc08ff1-fcf7-4792-9652-5e004331feab","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-9268","source_published_at":"2026-10-13T01:08:56.161+00:00","published_at":"2026-10-25T06:12:31.052414+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-9268"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Incorrect Authorization in GitLab","summary":"GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with limited permissions to modify project CI/CD deployment rollback settings without proper authorization, due to insufficient access control checks.","evidence":"cve:CVE-2026-9268","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-9268","aliases":["CVE-2026-9268"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":2.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"13.6","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T19:07:16.325Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/600934","https://hackerone.com/reports/3687442","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-9268","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T19:07:03.398175Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T19:07:16.325Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:08:56.161Z"}}},"related_cves":[{"value":"CVE-2026-9268","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"low"},"context_update":false},{"id":23049,"advisory_id":"b75632e1-0fec-491e-b59a-900ac880060e","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-85529","source_published_at":"2026-10-13T01:06:16.164+00:00","published_at":"2026-10-25T06:12:30.299315+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-85529"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Incorrect Authorization in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read internal notes and confidential system notes on public projects due to improper authorization in the GraphQL API.","evidence":"cve:CVE-2026-85529","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-85529","aliases":["CVE-2026-85529"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"19.2","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T19:12:36.538Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/627709","https://hackerone.com/reports/3975416","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-85529","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T19:12:27.274179Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T19:12:36.538Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:06:16.164Z"}}},"related_cves":[{"value":"CVE-2026-85529","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":23041,"advisory_id":"68df30a2-8536-4877-a488-15a27557e91a","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-14552","source_published_at":"2026-10-13T01:08:31.165+00:00","published_at":"2026-10-25T06:12:25.607525+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-14552"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Incorrect Authorization in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Guest access to read confidential epic content meant to be restricted by external authorization, due to incorrect authorization checks.","evidence":"cve:CVE-2026-14552","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-14552","aliases":["CVE-2026-14552"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"17.0","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T19:11:28.242Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/604841","https://hackerone.com/reports/3809364","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-14552","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T19:11:15.446726Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T19:11:28.242Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:08:31.165Z"}}},"related_cves":[{"value":"CVE-2026-14552","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":23039,"advisory_id":"1b9d1de7-1a37-46ab-a400-0dac89bf0462","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-14210","source_published_at":"2026-10-13T01:08:41.159+00:00","published_at":"2026-10-25T06:12:24.238854+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-14210"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Insufficient Granularity of Access Control in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a project-scoped fine-grained Personal Access Token to permanently delete or modify group-level labels, due to incorrect authorization logic on label ownership scope validation.","evidence":"cve:CVE-2026-14210","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-14210","aliases":["CVE-2026-14210"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"18.11","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T19:10:51.219Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/604538","https://hackerone.com/reports/3741505","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-14210","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T19:10:40.789646Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T19:10:51.219Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:08:41.159Z"}}},"related_cves":[{"value":"CVE-2026-14210","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":23038,"advisory_id":"3e8bd9ee-a085-4494-9ffa-828c4b883919","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100104","source_published_at":"2026-10-13T01:05:36.165+00:00","published_at":"2026-10-25T06:12:23.279512+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-100104"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Server-Side Request Forgery (SSRF) in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery and reach internal network resources due to a time-of-check to time-of-use race condition in URL validation during repository import operations.","evidence":"cve:CVE-2026-100104","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-100104","aliases":["CVE-2026-100104"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":3.5,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"10.3","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T19:14:13.091Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/594194","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100104","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T19:14:00.932263Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T19:14:13.091Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:05:36.165Z"}}},"related_cves":[{"value":"CVE-2026-100104","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"low"},"context_update":false},{"id":23035,"advisory_id":"71e1ddb6-d172-468d-9097-0cf0b9e777eb","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-7767","source_published_at":"2026-10-13T01:09:21.168+00:00","published_at":"2026-10-25T06:12:20.884702+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-7767"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"URL Redirection to Untrusted Site ('Open Redirect') in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server due to improper redirect validation in the Kubernetes proxy.","evidence":"cve:CVE-2026-7767","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-7767","aliases":["CVE-2026-7767"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.8,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"13.11","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T19:06:40.050Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/598965","https://hackerone.com/reports/3597095","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-7767","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T19:06:23.533930Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T19:06:40.050Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:09:21.168Z"}}},"related_cves":[{"value":"CVE-2026-7767","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":23025,"advisory_id":"c2130213-7dc5-4f69-8379-e60639261db6","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-16275","source_published_at":"2026-10-13T01:08:16.17+00:00","published_at":"2026-10-25T06:11:17.264298+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-16275"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Incorrect Authorization in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read confidential notes on public projects due to incorrect authorization checks.","evidence":"cve:CVE-2026-16275","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-16275","aliases":["CVE-2026-16275"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"17.4","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T19:05:44.356Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/606490","https://hackerone.com/reports/3815259","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-16275","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T19:05:24.851242Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T19:05:44.356Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:08:16.170Z"}}},"related_cves":[{"value":"CVE-2026-16275","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":23023,"advisory_id":"08e99bb3-97a7-4a84-82ed-3b0f9f7a4535","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103549","source_published_at":"2026-10-13T01:05:11.166+00:00","published_at":"2026-10-25T06:11:16.100907+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-103549"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Incorrect Authorization in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with maintainer-role permissions to remove certain package registry metadata that package protection rules restrict to higher roles, due to improper authorization checks.","evidence":"cve:CVE-2026-103549","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-103549","aliases":["CVE-2026-103549"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":2.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"17.6","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T19:03:20.241Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/631531","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-103549","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T19:03:09.218862Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T19:03:20.241Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:05:11.166Z"}}},"related_cves":[{"value":"CVE-2026-103549","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"low"},"context_update":false},{"id":23014,"advisory_id":"213441b2-1bf6-4a89-b98b-f16fc2f77339","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101168","source_published_at":"2026-10-13T01:05:21.167+00:00","published_at":"2026-10-25T06:11:10.879207+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-101168"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Insertion of Sensitive Information into Log File in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to insertion of sensitive request data into log files and error tracking events.","evidence":"cve:CVE-2026-101168","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-101168","aliases":["CVE-2026-101168"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":6.2,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"12.0","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T19:04:08.702Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab-pages/-/work_items/1187","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-101168","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T19:03:48.830828Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T19:04:08.702Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:05:21.167Z"}}},"related_cves":[{"value":"CVE-2026-101168","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":23013,"advisory_id":"29f50e2f-8e66-4fe7-8584-4676d73d30b1","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100755","source_published_at":"2026-10-13T01:05:31.161+00:00","published_at":"2026-10-25T06:11:10.299872+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-100755"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configurations, could have allowed an authenticated user to poison cached page content served to other users due to improper cache key construction.","evidence":"cve:CVE-2026-100755","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-100755","aliases":["CVE-2026-100755"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.6,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"16.2","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T19:04:37.788Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/627507","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100755","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T19:04:26.774513Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T19:04:37.788Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:05:31.161Z"}}},"related_cves":[{"value":"CVE-2026-100755","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"context_update":false},{"id":21738,"advisory_id":"f13815d8-f2ea-4b66-9b4a-9f2ba884abb5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97229","source_published_at":"2026-10-13T01:05:46.166+00:00","published_at":"2026-10-25T05:50:08.110969+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-97229"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Integer Overflow or Wraparound in GitLab","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.","evidence":"cve:CVE-2026-97229","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-97229","aliases":["CVE-2026-97229"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":10,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"19.2","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T10:51:05.616Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/630686","https://hackerone.com/reports/4055749","https://hackerone.com/reports/4058589","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97229","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-14T03:59:10.957307Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T10:51:05.616Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:05:46.166Z"}}},"related_cves":[{"value":"CVE-2026-97229","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"context_update":false},{"id":21737,"advisory_id":"9a53c03e-4e4a-44b1-b9fd-72d4391ee452","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-96893","source_published_at":"2026-10-13T01:05:41.162+00:00","published_at":"2026-10-25T05:50:07.535941+00:00","extraction_method":"structured","technologies":["core-cve","gitlab"],"cve_ids":["CVE-2026-96893"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Improper Neutralization of Input Used for LLM Prompting in GitLab","summary":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command execution attributed to other users, due to improper neutralization of special elements in AI conversation context construction.","evidence":"cve:CVE-2026-96893","products":[{"name":{"value":"GitLab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-96893","aliases":["CVE-2026-96893"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","product":"GitLab","versions":[{"status":"affected","version":"19.1","lessThan":"19.2.8","versionType":"semver"},{"status":"affected","version":"19.3","lessThan":"19.3.5","versionType":"semver"},{"status":"affected","version":"19.4","lessThan":"19.4.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T10:51:05.742Z","provider":"cve","references":["https://gitlab.com/gitlab-org/gitlab/-/work_items/607968","https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-96893","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-14T03:59:11.636585Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T10:51:05.742Z"}}],"cna":{"orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab","dateUpdated":"2026-10-13T01:05:41.162Z"}}},"related_cves":[{"value":"CVE-2026-96893","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"context_update":false}],"next_after":52700,"next_before":21737}