<article data-history-node-id="8412" about="\/en\/alerts-advisories\/gitlab-security-advisory-av26-1074" class="cccs-threats full clearfix"><\/p>\n
<div class="content">
\n <div class="layout layout–onecol">
\n <div class="layout__region layout__region–content"><\/p>\n
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix"><\/p>\n
<\/div><\/p>\n
<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix"><\/p>\n
<div class="field field–name-body field–type-text-with-summary field–label-hidden field–item"><p><strong>Serial Number:<\/strong> AV26-1074<br \/><strong>Date:<\/strong> October 22, 2026<\/p><\/p>\n
<p>As of October 21, 2026, GitLab is affected by vulnerabilities in the following product:<\/p><\/p>\n
<ul><li>GitLab Community Edition (CE) and Enterprise Edition (EE)
\n\t<ul><li>Prior to 18.11.13<\/li>
\n\t\t<li>Prior to 19.0.10<\/li>
\n\t\t<li>Prior to 19.1.9<\/li>
\n\t\t<li>Prior to 19.2.9<\/li>
\n\t\t<li>Prior to 19.3.6<\/li>
\n\t\t<li>Prior to 19.4.3<\/li>
\n\t\t<li>Prior to 19.5.1<\/li>
\n\t<\/ul><\/li>
\n<\/ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.<\/p><\/p>\n
<ul class="list-unstyled"><li><a class="external-link" href="https:\/\/docs.gitlab.com\/releases\/patches\/patch-release-gitlab-19-5-1-released\/">GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13<\/a><\/li>
\n\t<li><a class="external-link" href="https:\/\/docs.gitlab.com\/releases\/">GitLab release notes<\/a><\/li>
\n<\/ul><\/div><\/p>\n
<\/div><\/p>\n
<\/div>
\n <\/div><\/p>\n
<\/div><\/p>\n
<\/article><\/p>\n","protected":false},"excerpt":{"rendered":"
<article data-history-node-id="8412" about="\/en\/alerts-advisories\/gitlab-security-advisory-av26-1074" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[15,19],"class_list":["post-21712","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber-news","tag-cisa","tag-news"],"_links":{"self":[{"href":"https:\/\/advisoryloom.com\/almain\/wp-json\/wp\/v2\/posts\/21712","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/advisoryloom.com\/almain\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/advisoryloom.com\/almain\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/advisoryloom.com\/almain\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/advisoryloom.com\/almain\/wp-json\/wp\/v2\/comments?post=21712"}],"version-history":[{"count":0,"href":"https:\/\/advisoryloom.com\/almain\/wp-json\/wp\/v2\/posts\/21712\/revisions"}],"wp:attachment":[{"href":"https:\/\/advisoryloom.com\/almain\/wp-json\/wp\/v2\/media?parent=21712"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/advisoryloom.com\/almain\/wp-json\/wp\/v2\/categories?post=21712"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/advisoryloom.com\/almain\/wp-json\/wp\/v2\/tags?post=21712"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}