GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7

{
  "id": "9916d99e279a823d63626f4077f5420e4168112758a2330133b338061360559e",
  "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-1-2-released/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7",
    "summary": "GitLab released security fixes in GitLab CE and EE patch versions 19.1.2, 19.0.4, and 18.11.7. Self-managed installations running affected versions are strongly recommended to upgrade.",
    "evidence": "On July 8, 2026, we released versions 19.1.2, 19.0.4, 18.11.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes",
    "products": [
      {
        "name": {
          "value": "GitLab EE",
          "evidence": "GitLab EE: all versions from 13.11 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2"
        },
        "prerequisites": [
          {
            "value": "all installations running a version affected by the issues described below",
            "evidence": "We strongly recommend that all installations running a version affected by the issues described below are upgraded to the latest version as soon as possible."
          }
        ],
        "fixed_versions": [
          {
            "value": "18.11.7",
            "evidence": "On July 8, 2026, we released versions 19.1.2, 19.0.4, 18.11.7 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          },
          {
            "value": "19.0.4",
            "evidence": "On July 8, 2026, we released versions 19.1.2, 19.0.4, 18.11.7 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          },
          {
            "value": "19.1.2",
            "evidence": "On July 8, 2026, we released versions 19.1.2, 19.0.4, 18.11.7 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          }
        ],
        "affected_versions": [
          {
            "value": "all versions from 13.11 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2",
            "evidence": "GitLab EE: all versions from 13.11 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2"
          },
          {
            "value": "all versions from 9.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2",
            "evidence": "GitLab EE: all versions from 9.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2"
          },
          {
            "value": "all versions from 18.9 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2",
            "evidence": "GitLab EE: all versions from 18.9 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2"
          },
          {
            "value": "all versions from 16.10 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2",
            "evidence": "GitLab EE: all versions from 16.10 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2"
          },
          {
            "value": "all versions from 18.2 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2",
            "evidence": "GitLab EE: all versions from 18.2 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2"
          }
        ]
      },
      {
        "name": {
          "value": "GitLab CE/EE",
          "evidence": "GitLab CE/EE: all versions from 15.7 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2"
        },
        "prerequisites": [
          {
            "value": "all installations running a version affected by the issues described below",
            "evidence": "We strongly recommend that all installations running a version affected by the issues described below are upgraded to the latest version as soon as possible."
          }
        ],
        "fixed_versions": [
          {
            "value": "18.11.7",
            "evidence": "On July 8, 2026, we released versions 19.1.2, 19.0.4, 18.11.7 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          },
          {
            "value": "19.0.4",
            "evidence": "On July 8, 2026, we released versions 19.1.2, 19.0.4, 18.11.7 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          },
          {
            "value": "19.1.2",
            "evidence": "On July 8, 2026, we released versions 19.1.2, 19.0.4, 18.11.7 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          }
        ],
        "affected_versions": [
          {
            "value": "all versions from 15.7 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2",
            "evidence": "GitLab CE/EE: all versions from 15.7 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2"
          },
          {
            "value": "all versions from 9.1 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2",
            "evidence": "GitLab CE/EE: all versions from 9.1 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2"
          },
          {
            "value": "all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2",
            "evidence": "GitLab CE/EE: all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-6896",
        "evidence": "CVE-2026-6896 - Cross-site Scripting issue in vulnerability evidence table renderer impacts GitLab EE"
      },
      {
        "value": "CVE-2026-13320",
        "evidence": "CVE-2026-13320 - HTML Injection in wiki markup rendering impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-11827",
        "evidence": "CVE-2026-11827 - Insufficiently Protected Credentials issue in repository mirroring impacts GitLab EE"
      },
      {
        "value": "CVE-2026-8472",
        "evidence": "CVE-2026-8472 - Improper Access Control issue in work items impacts GitLab EE"
      },
      {
        "value": "CVE-2026-7492",
        "evidence": "CVE-2026-7492 - Missing Authorization issue in commit discussion display impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2025-12506",
        "evidence": "CVE-2025-12506 - Ambiguity Reference issue in a tag or branch impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-13151",
        "evidence": "CVE-2026-13151 - Incorrect Authorization issue in group-level settings impacts GitLab EE"
      },
      {
        "value": "CVE-2026-6352",
        "evidence": "CVE-2026-6352 - Incorrect Authorization issue in compliance violation management impacts GitLab EE"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-gitlab-security-releases",
  "document_id": 23750,
  "published_at": "2026-07-08T00:00:00+00:00"
}