6 matches found
cve-2026-19478
CVE-2026-19478 — GitLab GraphQL @glintroduced version-filter vulnerabilities A reproduction lab for two related bugs in GitLab's GraphQL version-filter feature the @glintroduced directive. Both live in the same feature area, are fixed by the same upstream patch, and both let a GraphQL request rea...
CVE-2026-19478
CVE-2026-19478 GitLab GraphQL unauthenticated project deletion ★ CVE-2026-19478 GitLab GraphQL @glintroduced unauthenticated arbitrary-method-invocation PoC ★ https://github.com/user-attachments/assets/bb5d5f8a-a9bf-4148-854b-14c25c501d4b Overview CVE-2026-19478 is an unauthenticated...
gitlab-cve-2026-19478-lab
CVE-2026-19478 — GitLab GraphQL @glintroduced unauthenticated arbitrary-method-invocation validation lab + PoC Reproducible A/B lab and safe PoC for CVE-2026-19478 GitLab CE/EE, CVSS 9.4, Critical. An unauthenticated attacker can invoke arbitrary 0-argument Ruby methods on GraphQL-resolved domain...
Gitlab-CVE-2026-19478
CVE-2026-19478 — GitLab GraphQL @glintroduced Directive Injection Unauthenticated Remote Code Injection via GraphQL Directive in GitLab CE/EE — Delete Any Public Project With a Single HTTP Request A hands-on penetration testing lab that reproduces CVE-2026-19478, a critical CVSS 9.4 vulnerability...
