{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "GitLab: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/gitlab--gitlab/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/gitlab--gitlab/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-110264/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-110264/",
   "title": "CVE-2026-110264 disclosed",
   "content_text": "An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.",
   "date_published": "2026-10-22T00:33:48Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-110264/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-110264/",
   "title": "CVE-2026-110264 fixed in Chainguard",
   "content_text": "Fixed versions: ruby-3.3 3.3.12-r10, ruby-3.3-dev 3.3.12-r10, ruby-3.3-doc 3.3.12-r10, ruby-3.4 3.4.11-r5, ruby-3.4-dev 3.4.11-r5, ruby-3.4-doc 3.4.11-r5, ruby-4.0 4.0.7-r6, ruby-4.0-dev 4.0.7-r6, ruby-4.0-doc 4.0.7-r6.",
   "date_published": "2026-10-22T00:33:48Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-110264/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-110264/",
   "title": "CVE-2026-110264 fixed in Wolfi",
   "content_text": "Fixed versions: ruby-3.3 3.3.12-r10, ruby-3.3-dev 3.3.12-r10, ruby-3.3-doc 3.3.12-r10, ruby-3.4 3.4.11-r5, ruby-3.4-dev 3.4.11-r5, ruby-3.4-doc 3.4.11-r5, ruby-4.0 4.0.7-r6, ruby-4.0-dev 4.0.7-r6, ruby-4.0-doc 4.0.7-r6.",
   "date_published": "2026-10-22T00:33:48Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12664/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12664/",
   "title": "CVE-2026-12664 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with a read_api-scoped token to retrieve a project's incoming email address and create work items, bypassing the token's restrictions, due to insufficient scope enforcement on a GraphQL field.",
   "date_published": "2026-10-21T23:35:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-13319/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-13319/",
   "title": "CVE-2026-13319 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authenticated to read milestone metadata, including titles, descriptions, and full project paths, from arbitrary private projects across the instance without any project membership, due to missing authorization checks on a user-supplied project filter parameter in the group milestones API.",
   "date_published": "2026-10-21T23:35:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-14288/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-14288/",
   "title": "CVE-2026-14288 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a protected branch due to improper access control during approval rule synchronization.",
   "date_published": "2026-10-21T23:35:20Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-15723/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-15723/",
   "title": "CVE-2026-15723 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAuth SAML and LDAP auto-linking were both enabled, an authenticated user could have taken over an existing LDAP-backed account without any interaction from the targeted user, due to improper input sanitization in the LDAP email lookup path used during OmniAuth identity linking.",
   "date_published": "2026-10-21T23:35:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-16255/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-16255/",
   "title": "CVE-2026-16255 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the instance-wide SAML or LDAP membership lock was enabled, an authenticated user could have granted or accepted project and group membership outside the identity provider's control, due to incomplete enforcement of the membership lock on requests created before the lock was enabled.",
   "date_published": "2026-10-21T23:35:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-103515/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-103515/",
   "title": "CVE-2026-103515 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an instance administrator locked a group's Duo availability, an authenticated user with group Owner permissions could have re-enabled AI-backed data egress to a third-party service for that group and its descendant projects, due to insufficient granularity of the admin-lock enforcement controls.",
   "date_published": "2026-10-21T23:34:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105711/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105711/",
   "title": "CVE-2026-105711 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue from a private project, an authenticated user with no project membership could have read the confidential issue's title, due to a viewer-independent fragment cache key that incorrectly shared per-user-redacted rendered content across all users.",
   "date_published": "2026-10-21T23:34:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105777/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105777/",
   "title": "CVE-2026-105777 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have retrieved sensitive internal server credentials due to improper filtering of internal response headers.",
   "date_published": "2026-10-21T23:34:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112378/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112378/",
   "title": "CVE-2026-112378 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid AI features without a valid subscription due to insufficient server-side validation in billing eligibility checks.",
   "date_published": "2026-10-21T23:33:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112212/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112212/",
   "title": "CVE-2026-112212 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have poisoned a shared cache's OAuth/OIDC discovery document to redirect certain flows to an externally controlled server, due to improper trust of user-supplied values when constructing endpoint URLs in cached discovery responses.",
   "date_published": "2026-10-21T23:33:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112326/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112326/",
   "title": "CVE-2026-112326 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with read-only permissions to permanently delete existing vulnerability records due to improper cleanup logic that failed to distinguish between pre-existing records from newly created ones during error handling.",
   "date_published": "2026-10-21T23:33:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-5954/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-5954/",
   "title": "CVE-2026-5954 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks.",
   "date_published": "2026-10-13T01:10:06Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-6567/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-6567/",
   "title": "CVE-2026-6567 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with reporter role to access restricted CI artifact report content they were not authorized to, due to missing authorization checks.",
   "date_published": "2026-10-13T01:09:46Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-7767/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-7767/",
   "title": "CVE-2026-7767 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server due to improper redirect validation in the Kubernetes proxy.",
   "date_published": "2026-10-13T01:09:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-9268/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-9268/",
   "title": "CVE-2026-9268 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with limited permissions to modify project CI/CD deployment rollback settings without proper authorization, due to insufficient access control checks.",
   "date_published": "2026-10-13T01:08:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-14210/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-14210/",
   "title": "CVE-2026-14210 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a project-scoped fine-grained Personal Access Token to permanently delete or modify group-level labels, due to incorrect authorization logic on label ownership scope validation.",
   "date_published": "2026-10-13T01:08:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-14552/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-14552/",
   "title": "CVE-2026-14552 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Guest access to read confidential epic content meant to be restricted by external authorization, due to incorrect authorization checks.",
   "date_published": "2026-10-13T01:08:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-14814/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-14814/",
   "title": "CVE-2026-14814 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted users' CI/CD pipelines to execute specially crafted content and potentially exposing protected environment variables, due to improper validation of repository references.",
   "date_published": "2026-10-13T01:08:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-16275/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-16275/",
   "title": "CVE-2026-16275 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read confidential notes on public projects due to incorrect authorization checks.",
   "date_published": "2026-10-13T01:08:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-16301/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-16301/",
   "title": "CVE-2026-16301 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper authorization checks in the downstream pipeline creation service.",
   "date_published": "2026-10-13T01:08:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-78335/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-78335/",
   "title": "CVE-2026-78335 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a project-scoped fine-grained Personal Access Token to modify integrations belonging to a group outside the token's scope, due to incorrect authorization checks.",
   "date_published": "2026-10-13T01:08:01Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-81839/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-81839/",
   "title": "CVE-2026-81839 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary CI/CD pipelines in a transferred project with the new group's privileges due to improper cleanup of scheduled pipeline execution policy records.",
   "date_published": "2026-10-13T01:07:51Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-82632/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-82632/",
   "title": "CVE-2026-82632 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a fine-grained Personal Access Token scoped only to user-boundary import permissions to import projects into group namespaces beyond the token's intended scope, due to incorrect authorization of the import target namespace.",
   "date_published": "2026-10-13T01:07:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84284/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84284/",
   "title": "CVE-2026-84284 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, 19.3 before 19.3.6, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read work item contents from private groups and projects due to incorrect authorization checks.",
   "date_published": "2026-10-13T01:06:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85529/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85529/",
   "title": "CVE-2026-85529 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read internal notes and confidential system notes on public projects due to improper authorization in the GraphQL API.",
   "date_published": "2026-10-13T01:06:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92528/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92528/",
   "title": "CVE-2026-92528 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to approve a merge request despite having contributed commits to it, due to improper identity resolution.",
   "date_published": "2026-10-13T01:06:01Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92883/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92883/",
   "title": "CVE-2026-92883 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2  that, under certain conditions, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users' browser sessions via a specially crafted repository, due to improper sanitization of HTML attributes in syntax-highlighted output.",
   "date_published": "2026-10-13T01:05:51Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97229/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97229/",
   "title": "CVE-2026-97229 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.",
   "date_published": "2026-10-13T01:05:46Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97229/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97229/",
   "title": "CVE-2026-97229 fixed in Chainguard",
   "content_text": "Fixed versions: ruby-3.3 3.3.12-r10, ruby-3.3-dev 3.3.12-r10, ruby-3.3-doc 3.3.12-r10, ruby-3.4 3.4.11-r5, ruby-3.4-dev 3.4.11-r5, ruby-3.4-doc 3.4.11-r5, ruby-4.0 4.0.7-r6, ruby-4.0-dev 4.0.7-r6, ruby-4.0-doc 4.0.7-r6.",
   "date_published": "2026-10-13T01:05:46Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97229/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97229/",
   "title": "CVE-2026-97229 fixed in openSUSE:Tumbleweed",
   "content_text": "Fixed versions: ruby4.0 4.0.9-1.1.",
   "date_published": "2026-10-13T01:05:46Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97229/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97229/",
   "title": "CVE-2026-97229 fixed in Wolfi",
   "content_text": "Fixed versions: ruby-3.3 3.3.12-r10, ruby-3.3-dev 3.3.12-r10, ruby-3.3-doc 3.3.12-r10, ruby-3.4 3.4.11-r5, ruby-3.4-dev 3.4.11-r5, ruby-3.4-doc 3.4.11-r5, ruby-4.0 4.0.7-r6, ruby-4.0-dev 4.0.7-r6, ruby-4.0-doc 4.0.7-r6.",
   "date_published": "2026-10-13T01:05:46Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96893/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96893/",
   "title": "CVE-2026-96893 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command execution attributed to other users, due to improper neutralization of special elements in AI conversation context construction.",
   "date_published": "2026-10-13T01:05:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-100104/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-100104/",
   "title": "CVE-2026-100104 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery and reach internal network resources due to a time-of-check to time-of-use race condition in URL validation during repository import operations.",
   "date_published": "2026-10-13T01:05:36Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-100755/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-100755/",
   "title": "CVE-2026-100755 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configurations, could have allowed an authenticated user to poison cached page content served to other users due to improper cache key construction.",
   "date_published": "2026-10-13T01:05:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101168/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101168/",
   "title": "CVE-2026-101168 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to insertion of sensitive request data into log files and error tracking events.",
   "date_published": "2026-10-13T01:05:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-103549/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-103549/",
   "title": "CVE-2026-103549 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with maintainer-role permissions to remove certain package registry metadata that package protection rules restrict to higher roles, due to improper authorization checks.",
   "date_published": "2026-10-13T01:05:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104661/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104661/",
   "title": "CVE-2026-104661 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a custom role with compliance framework administration permissions to configure and execute a specially crafted compliance pipeline across group projects due to improper privilege assignment.",
   "date_published": "2026-10-13T01:05:06Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105458/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105458/",
   "title": "CVE-2026-105458 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a specific granular permission to obtain a GitLab Duo Agent Platform token that bypasses governance controls, due to reliance on untrusted input in a security decision.",
   "date_published": "2026-10-13T01:04:51Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-1403/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-1403/",
   "title": "CVE-2026-1403 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that when importing CSV files could have allowed an authenticated user to cause denial of service to Sidekiq workers due to improper validation of CSV file structure.",
   "date_published": "2026-10-07T20:05:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-4523/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-4523/",
   "title": "CVE-2026-4523 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API.",
   "date_published": "2026-09-29T09:35:38Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-8937/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-8937/",
   "title": "CVE-2026-8937 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to read private child issue contents, including titles and descriptions, from projects they had no access to, due to missing authorization checks on linked work items within visible epics.",
   "date_published": "2026-09-29T09:35:33Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-10518/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-10518/",
   "title": "CVE-2026-10518 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with guest-level permissions to read private security policy content they were not authorized to access due to improper authorization enforcement.",
   "date_published": "2026-09-29T09:35:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84739/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84739/",
   "title": "CVE-2026-84739 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary JavaScript in the context of another user's browser session due to improper sanitization of path components in the merge request diff viewer.",
   "date_published": "2026-09-29T09:34:28Z"
  }
 ]
}