GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8

{
  "id": "3330d31823ec670d82825d6aebb5d919784a63c6b49fd9bc6c7559fe21f37862",
  "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-0-2-released/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8",
    "summary": "GitLab released security fixes for GitLab CE and EE in versions 19.0.2, 18.11.5, and 18.10.8 and recommends upgrading affected installations.",
    "evidence": "On June 10, 2026, we released versions 19.0.2, 18.11.5, 18.10.8 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes",
    "products": [
      {
        "name": {
          "value": "GitLab CE",
          "evidence": "GitLab CE/EE: all versions from 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "18.10.8",
            "evidence": "On June 10, 2026, we released versions 19.0.2, 18.11.5, 18.10.8 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          },
          {
            "value": "18.11.5",
            "evidence": "On June 10, 2026, we released versions 19.0.2, 18.11.5, 18.10.8 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          },
          {
            "value": "19.0.2",
            "evidence": "On June 10, 2026, we released versions 19.0.2, 18.11.5, 18.10.8 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          }
        ],
        "affected_versions": [
          {
            "value": "all versions from 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2",
            "evidence": "GitLab CE/EE: all versions from 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2"
          }
        ]
      },
      {
        "name": {
          "value": "GitLab EE",
          "evidence": "GitLab EE: all versions from 15.5 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "18.10.8",
            "evidence": "On June 10, 2026, we released versions 19.0.2, 18.11.5, 18.10.8 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          },
          {
            "value": "18.11.5",
            "evidence": "On June 10, 2026, we released versions 19.0.2, 18.11.5, 18.10.8 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          },
          {
            "value": "19.0.2",
            "evidence": "On June 10, 2026, we released versions 19.0.2, 18.11.5, 18.10.8 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          }
        ],
        "affected_versions": [
          {
            "value": "all versions from 15.5 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2",
            "evidence": "GitLab EE: all versions from 15.5 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-6552",
        "evidence": "CVE-2026-6552 - Improper Access Control issue in Group SAML Identity API impacts GitLab EE"
      },
      {
        "value": "CVE-2026-10087",
        "evidence": "CVE-2026-10087 - Cross-site Scripting issue in Analytics Dashboard impacts GitLab EE"
      },
      {
        "value": "CVE-2026-7250",
        "evidence": "CVE-2026-7250 - Denial of Service issue in Grape API JSON parsing middleware impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-8589",
        "evidence": "CVE-2026-8589 - HTML injection issue in certain group setting fields impacts GitLab EE"
      },
      {
        "value": "CVE-2026-1500",
        "evidence": "CVE-2026-1500 - Denial of Service issue in Group Placeholder Reassignments API impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-6269",
        "evidence": "CVE-2026-6269 - Improper Access Control issue in Merge Requests API impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-9204",
        "evidence": "CVE-2026-9204 - Server-Side Request Forgery issue in Gitaly repository import impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-10733",
        "evidence": "CVE-2026-10733 - HTML injection issue in CI/CD Catalog impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-6277",
        "evidence": "CVE-2026-6277 - Improper Access Control issue in Security Inventory impacts GitLab EE"
      },
      {
        "value": "CVE-2026-6976",
        "evidence": "CVE-2026-6976 - Authorization Bypass issue in Merge Request diff impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-3553",
        "evidence": "CVE-2026-3553 - Improper Access Control issue in Todos API impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-9694",
        "evidence": "CVE-2026-9694 - Improper Neutralization issue in Service Desk email template impacts GitLab CE/EE"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-gitlab-security-releases",
  "document_id": 23754,
  "published_at": "2026-06-10T00:00:00+00:00"
}