CVE-2026-103549

GitLab CE/EE versions 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 are vulnerable to an improper authorization check within the package registry . Under certain conditions, an authenticated user with maintainer-role permissions could remove specific package registry metadata tha...