CVE-2026-14351

The CVE covers GitLab CE/EE with an exposure affecting all 8.8-era releases up to 19.0.5, 19.1 up to 19.1.3, and 19.2 up to 19.2.1. Under certain conditions, an unauthenticated user could view the title of a confidential issue via a publicly accessible merge request due to improper authorization ...

PT-2026-65876

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 8.8 through 19.0.4 GitLab CE/EE versions 19.1 through 19.1.2 GitLab CE/EE versions 19.2 through 19.2.0 Description An improper authorization check in the mechanism used to generate headers for confidential issues allows a...

CVE-2026-1182

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.14 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to gain unauthorized access to confidential issue title created in public projects under certain circumstances...

PT-2019-9860 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: Gitlab CE/EE versions 8.6 up to 11.3.10 Gitlab CE/EE versions 11.4 up to 11.4.7 Gitlab CE/EE versions 11.5 up to 11.5.0 Description: The issue concerns an incorrect access control vulnerability. This vulnerability can display the title and...