GitLab 18.2 < 18.11.11 / 19.0 < 19.0.8 / 19.1 < 19.1.6 / 19.2 < 19.2.4 (CVE-2026-19478)

Language:

Version 1.4 Sep 3, 2026, 1:08 PM CVSS metrics ("CVSSv2 score" set to 9.4) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 9.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H") Plugin Feed: 202609031308
Version 1.3 Aug 21, 2026, 11:26 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202608212326
Version 1.2 Aug 20, 2026, 8:09 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202608200809
Version 1.1 Aug 18, 2026, 3:38 PM New Plugin Feed: 202608181538

* Changelogs are generally available for changes made after Nov 1, 2022