FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Gitlab -- vulnerabilities

Affected packages
19.2.0 <= gitlab-ce < 19.2.2
19.1.0 <= gitlab-ce < 19.1.4
12.0.0 <= gitlab-ce < 19.0.6
19.2.0 <= gitlab-ee < 19.2.2
19.1.0 <= gitlab-ee < 19.1.4
12.0.0 <= gitlab-ee < 19.0.6

Details

VuXML ID 2c73b6d5-971c-11f1-bdc8-2cf05da270f3
Discovery 2026-08-12
Entry 2026-08-13

Gitlab reports:

Cross-site Scripting issue in Analytics Dashboards table field configuration impacts GitLab CE/EE

Cross-site Scripting issue in Analytics Dashboards pagination controls impacts GitLab CE/EE GitLab

Improper Authorization issue in CI/CD pipeline API impacts GitLab CE/EE

Authorization Bypass issue in Duo Workflow Service impacts GitLab EE

Cross-site Scripting issue in CI manual job confirmation modal impacts GitLab CE/E

Missing Authorization issue in ProjectsController impacts GitLab EE

Denial of Service issue in GraphQL API JSON parser impacts GitLab CE/EE

Missing Authorization issue in merge requests API impacts GitLab EE

Missing Authorization issue in external status check API impacts GitLab EE

Incorrect Authorization issue in npm dist-tags endpoint impacts GitLab CE/EE

Missing Authorization issue in GitLab Duo settings page impacts GitLab EE

Incorrect Authorization issue in AI Tool Rules GraphQL resolver impacts GitLab EE

Incorrect Privilege Assignment issue in custom roles impacts GitLab EE

References

CVE Name CVE-2025-9486
CVE Name CVE-2026-15216
CVE Name CVE-2026-15217
CVE Name CVE-2026-15423
CVE Name CVE-2026-16494
CVE Name CVE-2026-16627
CVE Name CVE-2026-18244
CVE Name CVE-2026-18433
CVE Name CVE-2026-19228
CVE Name CVE-2026-4879
CVE Name CVE-2026-6821
CVE Name CVE-2026-7427
CVE Name CVE-2026-8667
URL https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-2-released/?nav=19.2.2