FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Gitlab -- vulnerabilities

Affected packages
19.4.0 <= gitlab-ce < 19.4.2
19.3.0 <= gitlab-ce < 19.3.4
10.3.0 <= gitlab-ce < 19.2.8
19.4.0 <= gitlab-ee < 19.4.2
19.3.0 <= gitlab-ee < 19.3.4
10.3.0 <= gitlab-ee < 19.2.8

Details

VuXML ID 5518664d-c652-11f1-b273-2cf05da270f3
Discovery 2026-10-12
Entry 2026-10-12

Gitlab reports:

Integer Overflow issue in CI/CD Regular Expression Compiler impacts GitLab CE/EE

Cross-site Scripting issue in syntax highlighting impacts GitLab CE/EE

Improper Authorization issue in downstream pipeline creation service impacts GitLab CE/EE

Permissive Regular Expression issue in repository file access impacts GitLab CE/EE

Incorrect Authorization issue in scheduled pipeline execution policy impacts GitLab EE

Improper Neutralization of Input Used for LLM Prompting issue in GitLab Duo Agent Platform impacts GitLab EE

Sensitive Information Exposure issue in GitLab Pages impacts GitLab CE/EE

Open Redirect issue in Kubernetes proxy impacts GitLab CE/EE

Incorrect Authorization issue in GraphQL notes widget impacts GitLab CE/EE

Incorrect Authorization issue in GraphQL work item hierarchy impacts GitLab CE/EE

Incorrect Authorization issue in GraphQL scope impacts GitLab CE/EE

Page cache poisoning via improper cache key construction in merge requests impacts GitLab CE/EE

Incorrect Authorization issue in work items GraphQL API impacts GitLab CE/EE

Missing Authorization issue in merge request accessibility report comparison endpoint impacts GitLab CE/EE

Incorrect Privilege Assignment issue in custom roles impacts GitLab EE

Insufficient Granularity of Access Control issue in project label management impacts GitLab CE/EE

Governance Control Bypass issue in Duo Agent Platform impacts GitLab EE

Incorrect Authorization issue in package registry impacts GitLab CE/EE

Incorrect Authorization issue in merge request approval eligibility check impacts GitLab EE

Incorrect Authorization issue in fine-grained personal access tokens impacts GitLab CE/EE

Server Side Request Forgery (SSRF) issue in repository import impacts GitLab CE/EE

Incorrect Authorization issue in project import impacts GitLab CE/EE

Incorrect Authorization issue in Package Registry impacts GitLab CE/EE

Improper Access Control issue in project CI/CD settings impacts GitLab EE

References

CVE Name CVE-2026-100104
CVE Name CVE-2026-100755
CVE Name CVE-2026-101168
CVE Name CVE-2026-103549
CVE Name CVE-2026-104661
CVE Name CVE-2026-105458
CVE Name CVE-2026-14210
CVE Name CVE-2026-14552
CVE Name CVE-2026-14814
CVE Name CVE-2026-16275
CVE Name CVE-2026-16301
CVE Name CVE-2026-5954
CVE Name CVE-2026-6567
CVE Name CVE-2026-7767
CVE Name CVE-2026-78335
CVE Name CVE-2026-81839
CVE Name CVE-2026-82632
CVE Name CVE-2026-84284
CVE Name CVE-2026-85529
CVE Name CVE-2026-92528
CVE Name CVE-2026-9268
CVE Name CVE-2026-92883
CVE Name CVE-2026-96893
CVE Name CVE-2026-97229
URL https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/?nav=19.4.2