<article data-history-node-id="8412" about="/en/alerts-advisories/gitlab-security-advisory-av26-1074" class="cccs-threats full clearfix">
<div class="content">
<div class="layout layout–onecol">
<div class="layout__region layout__region–content">
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
</div>
<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
<div class="field field–name-body field–type-text-with-summary field–label-hidden field–item"><p><strong>Serial Number:</strong> AV26-1074<br /><strong>Date:</strong> October 22, 2026</p>
<p>As of October 21, 2026, GitLab is affected by vulnerabilities in the following product:</p>
<ul><li>GitLab Community Edition (CE) and Enterprise Edition (EE)
<ul><li>Prior to 18.11.13</li>
<li>Prior to 19.0.10</li>
<li>Prior to 19.1.9</li>
<li>Prior to 19.2.9</li>
<li>Prior to 19.3.6</li>
<li>Prior to 19.4.3</li>
<li>Prior to 19.5.1</li>
</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>
<ul class="list-unstyled"><li><a class="external-link" href="https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/">GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13</a></li>
<li><a class="external-link" href="https://docs.gitlab.com/releases/">GitLab release notes</a></li>
</ul></div>
</div>
</div>
</div>
</div>
</article>
