EUVD-2026-107676

GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the instance-wide SAML or LDAP membership lock was enabled, an authenticated user could have granted or accepted project and group membership outside t...

CVE-2026-16255

GitLab EE is vulnerable to incorrect authorization (CWE-863) in versions 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1. When the instance-wide SAML or LDAP membership lock is enabled, an authenticated user can grant or accept project and group memberships outside the identity pro...