GHSA-MQC6-5CM6-J5MH vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-P26W-35R3-7X6P vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-V4CM-2JQ7-XGMQ vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-V4PV-WCVF-GWVM vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-XW26-H8VQ-GFF9 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-78335 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-82632 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-100755 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-14552 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-16275 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-49C6-8PH4-9VR9 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-92883 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-7RX8-QC4H-GMX2 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-F8H6-2X47-CRGV vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-FQQC-43F5-5HMG vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-VRCJ-7WHQ-6C76 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

BIT-GITLAB-2026-16255 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the instance-wide SAML or LDAP membership lock was enabled, an authenticated user could have granted or accepted project and group membership outside t...

BIT-GITLAB-2026-14288 Use of Incorrectly-Resolved Name or Reference in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a protected branch due to improper access...

BIT-GITLAB-2026-112378 Use of Less Trusted Source in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid AI features without a valid subscription due to insufficient server-side...

BIT-GITLAB-2026-103515 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an instance administrator locked a group's Duo availability, an authenticated user with group Owner permissions could have re-enabled AI-backed data...