FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Gitlab -- vulnerabilities

Affected packages
19.5.0 <= gitlab-ce < 19.5.1
19.4.0 <= gitlab-ce < 19.4.3
7.0.0 <= gitlab-ce < 19.3.6
19.5.0 <= gitlab-ee < 19.5.1
19.4.0 <= gitlab-ee < 19.4.3
7.0.0 <= gitlab-ee < 19.3.6

Details

VuXML ID 7db37b57-ced8-11f1-ac90-2cf05da270f3
Discovery 2026-10-21
Entry 2026-10-23

Gitlab reports:

Integer Overflow issue in Regular Expression Compiler impacts GitLab CE/EE

Improper Authentication issue in OmniAuth-to-LDAP auto-linking email lookup impacts GitLab CE/EE

Cache Poisoning issue in OAuth/OIDC discovery endpoints impacts GitLab CE/EE

Improper Access Control issue in GraphQL work item email address field impacts GitLab CE/EE

Incomplete enforcement of instance-wide SAML/LDAP membership lock allows unauthorized member additions in GitLab EE

Internal Credential Exposure issue in internal response headers impacts GitLab CE/EE

Authorization Bypass Through User-Controlled Key issue in group milestones API impacts GitLab CE/EE

Use of Less Trusted Source issue in AI Gateway feature enablement header impacts GitLab EE

Use of Cache Containing Sensitive Information issue in merge request title rendering impacts GitLab CE/EE

Improper Access Control issue in merge request approval policy enforcement impacts GitLab EE

Improper Cleanup on Thrown Exception issue in security findings impacts GitLab EE

Improper Access Control issue in group Duo admin-lock enforcement for Amazon Q settings impacts GitLab EE

References

CVE Name CVE-2026-103515
CVE Name CVE-2026-105711
CVE Name CVE-2026-105777
CVE Name CVE-2026-110264
CVE Name CVE-2026-112212
CVE Name CVE-2026-112326
CVE Name CVE-2026-112378
CVE Name CVE-2026-12664
CVE Name CVE-2026-13319
CVE Name CVE-2026-14288
CVE Name CVE-2026-15723
CVE Name CVE-2026-16255
URL https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/?nav=19.5.1