FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Gitlab -- vulnerabilities

Affected packages
19.2.0 <= gitlab-ce < 19.2.1
19.1.0 <= gitlab-ce < 19.1.3
8.8.0 <= gitlab-ce < 19.0.5
19.2.0 <= gitlab-ee < 19.2.1
19.1.0 <= gitlab-ee < 19.1.3
8.8.0 <= gitlab-ee < 19.0.5

Details

VuXML ID 661d3db5-8bd9-11f1-9c40-2cf05da270f3
Discovery 2026-07-29
Entry 2026-07-30

Gitlab reports:

Sensitive Information Exposure issue in Workhorse impacts GitLab CE/EE

Mass Assignment issue in Pipeline Schedule API impacts GitLab CE/EE

Denial of Service issue in Merge Request Discussions impacts GitLab CE/EE

Race Condition issue in merge request approval rules impacts GitLab EE

Insufficiently Protected Credentials issue in Virtual Registries impacts GitLab EE

Improper Access Control issue in project import status impacts GitLab CE/EE

Improper Authorization issue in project import functionality impacts GitLab CE/EE

Cross-site Scripting issue in paginated views impacts GitLab CE/EE

Prompt Injection issue in Duo Code Review impacts GitLab EE

Incorrect Security Token Generation issue in Duo Workflows impacts GitLab EE

Exposure of Sensitive Information issue in merge request title generation impacts GitLab CE/EE

Improper Access Control issue in Pipeline Test Report API impacts GitLab CE/EE

Incorrect Authorization issue in merge request collaboration settings impacts GitLab CE/EE

References

CVE Name CVE-2025-14562
CVE Name CVE-2026-12436
CVE Name CVE-2026-13113
CVE Name CVE-2026-14341
CVE Name CVE-2026-14351
CVE Name CVE-2026-15077
CVE Name CVE-2026-15831
CVE Name CVE-2026-15975
CVE Name CVE-2026-16553
CVE Name CVE-2026-3093
CVE Name CVE-2026-4672
CVE Name CVE-2026-6267
CVE Name CVE-2026-6336
URL https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-1-released/?nav=19.2.1