Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-77801

Fixed in a distro release EPSS <1%CVSS 6.5

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, could have allowed an authenticated user to cause a denial of service affecting background job processing, due to missing object count limits.

Published 2026-08-26 · CVE record · OSV

Products: GitLab

Distro releases

ReleasePackageFixed in
Chainguardgitaly-config-19.019.0.8-r5
Chainguardgitlab-agent-19.219.2.5-r0
Chainguardgitlab-base-19.019.0.8-r5
Chainguardgitlab-base-fips-19.019.0.8-r2
Chainguardgitlab-certificates-19.019.0.8-r5
Chainguardgitlab-cfssl-self-sign-scripts-19.019.0.8-r5
Chainguardgitlab-cng-19.019.0.8-r5
Chainguardgitlab-cng-fips-19.019.0.8-r2
Chainguardgitlab-container-registry-19.019.0.8-r5
Chainguardgitlab-container-registry-fips-19.019.0.8-r2
Chainguardgitlab-container-registry-scripts-19.019.0.8-r5
Chainguardgitlab-docker-machine-19.119.1.2-r5
Chainguardgitlab-docker-machine-19.219.2.3-r1
Chainguardgitlab-docker-machine-fips-19.119.1.2-r3
Chainguardgitlab-docker-machine-fips-19.219.2.3-r1
Chainguardgitlab-exporter-19.019.0.8-r5
Chainguardgitlab-exporter-scripts-19.019.0.8-r5
Chainguardgitlab-gitaly-scripts-19.019.0.8-r5
Chainguardgitlab-kas-19.219.2.5-r0
Chainguardgitlab-logger-19.019.0.8-r5
Chainguardgitlab-logger-fips-19.019.0.8-r2
Chainguardgitlab-pages-scripts-19.019.0.8-r5
Chainguardgitlab-rails-ce-18.1018.10.8-r6
Chainguardgitlab-rails-ce-18.1118.11.11-r1
Chainguardgitlab-rails-ce-18.718.7.7-r5
Chainguardgitlab-rails-ce-18.818.8.11-r7
Chainguardgitlab-rails-ce-18.918.9.8-r10
Chainguardgitlab-rails-ce-19.019.0.8-r3
Chainguardgitlab-rails-ce-assets-18.1018.10.8-r6
Chainguardgitlab-rails-ce-assets-18.1118.11.11-r1
Chainguardgitlab-rails-ce-assets-18.718.7.7-r5
Chainguardgitlab-rails-ce-assets-18.818.8.11-r7
Chainguardgitlab-rails-ce-assets-18.918.9.8-r10
Chainguardgitlab-rails-ce-assets-19.019.0.8-r3
Chainguardgitlab-rails-ce-assets-fips-18.1018.10.8-r7
Chainguardgitlab-rails-ce-assets-fips-18.1118.11.11-r1
Chainguardgitlab-rails-ce-assets-fips-18.718.7.7-r6
Chainguardgitlab-rails-ce-assets-fips-18.818.8.11-r7
Chainguardgitlab-rails-ce-assets-fips-18.918.9.8-r7
Chainguardgitlab-rails-ce-assets-fips-19.019.0.8-r1
Chainguardgitlab-rails-ce-doc-18.1018.10.8-r6
Chainguardgitlab-rails-ce-doc-18.1118.11.11-r1
Chainguardgitlab-rails-ce-doc-18.718.7.7-r5
Chainguardgitlab-rails-ce-doc-18.818.8.11-r7
Chainguardgitlab-rails-ce-doc-18.918.9.8-r10
Chainguardgitlab-rails-ce-doc-19.019.0.8-r3
Chainguardgitlab-rails-ce-doc-fips-18.1018.10.8-r7
Chainguardgitlab-rails-ce-doc-fips-18.1118.11.11-r1
Chainguardgitlab-rails-ce-doc-fips-18.718.7.7-r6
Chainguardgitlab-rails-ce-doc-fips-18.818.8.11-r7
Chainguardgitlab-rails-ce-doc-fips-18.918.9.8-r7
Chainguardgitlab-rails-ce-doc-fips-19.019.0.8-r1
Chainguardgitlab-rails-ce-fips-18.1018.10.8-r7
Chainguardgitlab-rails-ce-fips-18.1118.11.11-r1
Chainguardgitlab-rails-ce-fips-18.718.7.7-r6
Chainguardgitlab-rails-ce-fips-18.818.8.11-r7
Chainguardgitlab-rails-ce-fips-18.918.9.8-r7
Chainguardgitlab-rails-ce-fips-19.019.0.8-r1
Chainguardgitlab-rails-scripts-19.019.0.8-r5
Chainguardgitlab-rails-scripts-fips-19.019.0.8-r2
Chainguardgitlab-runner-19.119.1.2-r5
Chainguardgitlab-runner-19.219.2.3-r1
Chainguardgitlab-runner-fips-19.119.1.2-r3
Chainguardgitlab-runner-fips-19.219.2.3-r1
Chainguardgitlab-runner-helper-19.119.1.2-r5
Chainguardgitlab-runner-helper-19.219.2.3-r1
Chainguardgitlab-runner-helper-compat-19.119.1.2-r5
Chainguardgitlab-runner-helper-compat-19.219.2.3-r1
Chainguardgitlab-runner-helper-compat-fips-19.119.1.2-r3
Chainguardgitlab-runner-helper-compat-fips-19.219.2.3-r1
Chainguardgitlab-runner-helper-fips-19.119.1.2-r3
Chainguardgitlab-runner-helper-fips-19.219.2.3-r1
Chainguardgitlab-runner-helper-oci-entrypoint-19.119.1.2-r5
Chainguardgitlab-runner-helper-oci-entrypoint-19.219.2.3-r1
Chainguardgitlab-runner-helper-oci-entrypoint-fips-19.119.1.2-r3
Chainguardgitlab-runner-helper-oci-entrypoint-fips-19.219.2.3-r1
Chainguardgitlab-runner-oci-entrypoint-19.119.1.2-r6
Chainguardgitlab-runner-oci-entrypoint-19.219.2.3-r1
Chainguardgitlab-runner-oci-entrypoint-fips-19.119.1.2-r3
Chainguardgitlab-runner-oci-entrypoint-fips-19.219.2.3-r1
Chainguardgitlab-shell-19.019.0.8-r5
Chainguardgitlab-shell-fips-19.019.0.8-r2
Chainguardgitlab-shell-scripts-19.019.0.8-r5
Chainguardgitlab-sidekiq-ce-19.019.0.8-r5
Chainguardgitlab-sidekiq-ce-fips-19.019.0.8-r2
Chainguardgitlab-toolbox-ce-19.019.0.8-r5
Chainguardgitlab-toolbox-ce-fips-19.019.0.8-r2
Chainguardgitlab-webservice-ce-19.019.0.8-r5
Chainguardgitlab-webservice-ce-fips-19.019.0.8-r2
Chainguardgitlab-workhorse-ce-18.1018.10.8-r6
Chainguardgitlab-workhorse-ce-18.1118.11.11-r3
Chainguardgitlab-workhorse-ce-18.718.7.7-r8
Chainguardgitlab-workhorse-ce-18.818.8.11-r5
Chainguardgitlab-workhorse-ce-18.918.9.8-r9
Chainguardgitlab-workhorse-ce-19.019.0.8-r2
Chainguardgitlab-workhorse-ce-fips-18.1018.10.8-r6
Chainguardgitlab-workhorse-ce-fips-18.1118.11.11-r1
Chainguardgitlab-workhorse-ce-fips-18.718.7.7-r7
Chainguardgitlab-workhorse-ce-fips-18.818.8.11-r7
Chainguardgitlab-workhorse-ce-fips-18.918.9.8-r8
Chainguardgitlab-workhorse-ce-fips-19.019.0.8-r1
Chainguardgitlab-workhorse-scripts-19.019.0.8-r5
Chainguardgitlab-workhorse-scripts-fips-19.019.0.8-r2
Wolfigitlab-agent-19.219.2.5-r0
Wolfigitlab-docker-machine-19.119.1.2-r5
Wolfigitlab-docker-machine-19.219.2.3-r1
Wolfigitlab-kas-19.219.2.5-r0
Wolfigitlab-runner-19.119.1.2-r5
Wolfigitlab-runner-19.219.2.3-r1
Wolfigitlab-runner-helper-19.119.1.2-r5
Wolfigitlab-runner-helper-19.219.2.3-r1
Wolfigitlab-runner-helper-compat-19.119.1.2-r5
Wolfigitlab-runner-helper-compat-19.219.2.3-r1
Wolfigitlab-runner-helper-oci-entrypoint-19.119.1.2-r5
Wolfigitlab-runner-helper-oci-entrypoint-19.219.2.3-r1
Wolfigitlab-runner-oci-entrypoint-19.119.1.2-r6
Wolfigitlab-runner-oci-entrypoint-19.219.2.3-r1