GitLab Patch Release: 19.2.2, 19.1.4, 19.0.6

{
  "id": "8c4b5ef58e5fcc332e48d26632067bfeeaec397058f240fcea1fc5ac47727e5c",
  "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-2-released/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "GitLab Patch Release: 19.2.2, 19.1.4, 19.0.6",
    "summary": "GitLab released security fixes in versions 19.2.2, 19.1.4, and 19.0.6 for GitLab CE and EE. The announcement recommends that installations affected by the listed issues upgrade to the latest version as soon as possible.",
    "evidence": "On August 12, 2026, we released versions 19.2.2, 19.1.4, 19.0.6 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes",
    "products": [
      {
        "name": {
          "value": "GitLab CE/EE",
          "evidence": "GitLab CE/EE: all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "19.0.6",
            "evidence": "On August 12, 2026, we released versions 19.2.2, 19.1.4, 19.0.6 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          },
          {
            "value": "19.1.4",
            "evidence": "On August 12, 2026, we released versions 19.2.2, 19.1.4, 19.0.6 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          },
          {
            "value": "19.2.2",
            "evidence": "On August 12, 2026, we released versions 19.2.2, 19.1.4, 19.0.6 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          }
        ],
        "affected_versions": [
          {
            "value": "all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2",
            "evidence": "GitLab CE/EE: all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2"
          }
        ]
      },
      {
        "name": {
          "value": "GitLab EE",
          "evidence": "Impacted Versions: GitLab EE: all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "19.1.4",
            "evidence": "On August 12, 2026, we released versions 19.2.2, 19.1.4, 19.0.6 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          },
          {
            "value": "19.2.2",
            "evidence": "On August 12, 2026, we released versions 19.2.2, 19.1.4, 19.0.6 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          }
        ],
        "affected_versions": [
          {
            "value": "all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2",
            "evidence": "Impacted Versions: GitLab EE: all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-15217",
        "evidence": "CVE-2026-15217 - Cross-site Scripting issue in Analytics Dashboards table field configuration impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-15216",
        "evidence": "CVE-2026-15216 - Cross-site Scripting issue in Analytics Dashboards pagination controls impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-10053",
        "evidence": "CVE-2026-10053 - Remote code execution via path traversal in package registry impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-15423",
        "evidence": "CVE-2026-15423 - Improper Authorization issue in CI/CD pipeline API impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-19228",
        "evidence": "CVE-2026-19228 - Authorization Bypass issue in Duo Workflow Service impacts GitLab EE"
      },
      {
        "value": "CVE-2026-16627",
        "evidence": "CVE-2026-16627 - Cross-site Scripting issue in CI manual job confirmation modal impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-16494",
        "evidence": "CVE-2026-16494 - Missing Authorization issue in ProjectsController impacts GitLab EE"
      },
      {
        "value": "CVE-2026-7427",
        "evidence": "CVE-2026-7427 - Denial of Service issue in GraphQL API JSON parser impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-6821",
        "evidence": "CVE-2026-6821 - Missing Authorization issue in merge requests API impacts GitLab EE"
      },
      {
        "value": "CVE-2026-4879",
        "evidence": "CVE-2026-4879 - Missing Authorization issue in external status check API impacts GitLab EE"
      },
      {
        "value": "CVE-2026-8667",
        "evidence": "CVE-2026-8667 - Incorrect Authorization issue in npm dist-tags endpoint impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-18244",
        "evidence": "CVE-2026-18244 - Missing Authorization issue in GitLab Duo settings page impacts GitLab EE"
      },
      {
        "value": "CVE-2026-18433",
        "evidence": "CVE-2026-18433 - Incorrect Authorization issue in AI Tool Rules GraphQL resolver impacts GitLab EE"
      },
      {
        "value": "CVE-2025-9486",
        "evidence": "CVE-2025-9486 - Incorrect Privilege Assignment issue in custom roles impacts GitLab EE"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-gitlab-security-releases",
  "document_id": 23746,
  "published_at": "2026-08-12T00:00:00+00:00"
}