CVE-2026-5954

GitLab CE/EE versions from 15.1 before 19.2.8 , 19.3 before 19.3.5 , and 19.4 before 19.4.2 are vulnerable to an improper authorization check . Under certain conditions, this flaw could allow a user to download package files from a public project. The issue has been remediated in the versions spe...

EUVD-2026-98230

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks...