{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "GitLab: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/gitlab--gitlab/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/gitlab--gitlab/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-110264/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-110264/",
   "title": "CVE-2026-110264 disclosed",
   "content_text": "An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.",
   "date_published": "2026-10-22T00:33:48Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-110264/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-110264/",
   "title": "CVE-2026-110264 fixed in Chainguard",
   "content_text": "Fixed versions: ruby-3.3 3.3.12-r10, ruby-3.3-dev 3.3.12-r10, ruby-3.3-doc 3.3.12-r10, ruby-3.4 3.4.11-r5, ruby-3.4-dev 3.4.11-r5, ruby-3.4-doc 3.4.11-r5, ruby-4.0 4.0.7-r6, ruby-4.0-dev 4.0.7-r6, ruby-4.0-doc 4.0.7-r6.",
   "date_published": "2026-10-22T00:33:48Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-110264/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-110264/",
   "title": "CVE-2026-110264 fixed in Wolfi",
   "content_text": "Fixed versions: ruby-3.3 3.3.12-r10, ruby-3.3-dev 3.3.12-r10, ruby-3.3-doc 3.3.12-r10, ruby-3.4 3.4.11-r5, ruby-3.4-dev 3.4.11-r5, ruby-3.4-doc 3.4.11-r5, ruby-4.0 4.0.7-r6, ruby-4.0-dev 4.0.7-r6, ruby-4.0-doc 4.0.7-r6.",
   "date_published": "2026-10-22T00:33:48Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-15723/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-15723/",
   "title": "CVE-2026-15723 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAuth SAML and LDAP auto-linking were both enabled, an authenticated user could have taken over an existing LDAP-backed account without any interaction from the targeted user, due to improper input sanitization in the LDAP email lookup path used during OmniAuth identity linking.",
   "date_published": "2026-10-21T23:35:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112212/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112212/",
   "title": "CVE-2026-112212 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have poisoned a shared cache's OAuth/OIDC discovery document to redirect certain flows to an externally controlled server, due to improper trust of user-supplied values when constructing endpoint URLs in cached discovery responses.",
   "date_published": "2026-10-21T23:33:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-14814/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-14814/",
   "title": "CVE-2026-14814 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted users' CI/CD pipelines to execute specially crafted content and potentially exposing protected environment variables, due to improper validation of repository references.",
   "date_published": "2026-10-13T01:08:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-16301/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-16301/",
   "title": "CVE-2026-16301 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper authorization checks in the downstream pipeline creation service.",
   "date_published": "2026-10-13T01:08:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-81839/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-81839/",
   "title": "CVE-2026-81839 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary CI/CD pipelines in a transferred project with the new group's privileges due to improper cleanup of scheduled pipeline execution policy records.",
   "date_published": "2026-10-13T01:07:51Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92883/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92883/",
   "title": "CVE-2026-92883 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2  that, under certain conditions, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users' browser sessions via a specially crafted repository, due to improper sanitization of HTML attributes in syntax-highlighted output.",
   "date_published": "2026-10-13T01:05:51Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97229/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97229/",
   "title": "CVE-2026-97229 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.",
   "date_published": "2026-10-13T01:05:46Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97229/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97229/",
   "title": "CVE-2026-97229 fixed in Chainguard",
   "content_text": "Fixed versions: ruby-3.3 3.3.12-r10, ruby-3.3-dev 3.3.12-r10, ruby-3.3-doc 3.3.12-r10, ruby-3.4 3.4.11-r5, ruby-3.4-dev 3.4.11-r5, ruby-3.4-doc 3.4.11-r5, ruby-4.0 4.0.7-r6, ruby-4.0-dev 4.0.7-r6, ruby-4.0-doc 4.0.7-r6.",
   "date_published": "2026-10-13T01:05:46Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97229/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97229/",
   "title": "CVE-2026-97229 fixed in openSUSE:Tumbleweed",
   "content_text": "Fixed versions: ruby4.0 4.0.9-1.1.",
   "date_published": "2026-10-13T01:05:46Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97229/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97229/",
   "title": "CVE-2026-97229 fixed in Wolfi",
   "content_text": "Fixed versions: ruby-3.3 3.3.12-r10, ruby-3.3-dev 3.3.12-r10, ruby-3.3-doc 3.3.12-r10, ruby-3.4 3.4.11-r5, ruby-3.4-dev 3.4.11-r5, ruby-3.4-doc 3.4.11-r5, ruby-4.0 4.0.7-r6, ruby-4.0-dev 4.0.7-r6, ruby-4.0-doc 4.0.7-r6.",
   "date_published": "2026-10-13T01:05:46Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96893/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96893/",
   "title": "CVE-2026-96893 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command execution attributed to other users, due to improper neutralization of special elements in AI conversation context construction.",
   "date_published": "2026-10-13T01:05:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84739/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84739/",
   "title": "CVE-2026-84739 disclosed",
   "content_text": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary JavaScript in the context of another user's browser session due to improper sanitization of path components in the merge request diff viewer.",
   "date_published": "2026-09-29T09:34:28Z"
  }
 ]
}