CVE-2026-6821

GitLab CVE-2026-6821 affects GitLab EE. Affected: all versions 12.0 up to but not including 19.0.6; 19.1 up to but not including 19.1.4; 19.2 up to but not including 19.2.2. Root cause: missing authorization checks in a merge requests API endpoint could allow an authenticated user to bypass IP-ba...

Gitlab -- vulnerabilities

Gitlab reports: Improper Access Control issue in Group SAML Identity API impacts GitLab EE Cross-site Scripting issue in Analytics Dashboard impacts GitLab EE Denial of Service issue in Grape API JSON parsing middleware impacts GitLab CE/EE HTML injection issue in certain group setting fields...