FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Gitlab -- Vulnerabilities

Affected packages
19.2.0	<=	gitlab-ce	<	19.2.4
19.1.0	<=	gitlab-ce	<	19.1.6
18.11.10	<=	gitlab-ce	<	19.0.8
19.2.0	<=	gitlab-ee	<	19.2.4
19.1.0	<=	gitlab-ee	<	19.1.6
18.11.10	<=	gitlab-ee	<	19.0.8

Details

VuXML ID	3a65fb7e-9ac2-11f1-bdc8-2cf05da270f3
Discovery	2026-08-17
Entry	2026-08-18

Gitlab reports:

Code Injection issue via GraphQL directive impacts GitLab CE/EE

Cross-Site Request Forgery issue in GraphQL multiplex query handler impacts GitLab CE/EE

[source]

References

CVE Name	CVE-2026-19478
CVE Name	CVE-2026-19650
URL	https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/?nav=19.2.4