Gitlab -- vulnerabilities

2026-10-12 · CVE-2026-97229, CVE-2026-92883, CVE-2026-16301, CVE-2026-14814, CVE-2026-81839, CVE-2026-96893, CVE-2026-101168, CVE-2026-7767, CVE-2026-16275, CVE-2026-84284, CVE-2026-85529, CVE-2026-100755, CVE-2026-14552, CVE-2026-6567, CVE-2026-104661, CVE-2026-14210, CVE-2026-105458, CVE-2026-5954, CVE-2026-92528, CVE-2026-78335, CVE-2026-100104, CVE-2026-82632, CVE-2026-103549, CVE-2026-9268 · VuXML entry

Gitlab reports: Integer Overflow issue in CI/CD Regular Expression Compiler impacts GitLab CE/EE Cross-site Scripting issue in syntax highlighting impacts GitLab CE/EE Improper Authorization issue in downstream pipeline creation service impacts GitLab CE/EE Permissive Regular Expression issue in repository file access impacts GitLab CE/EE Incorrect Authorization issue in scheduled pipeline execution policy impacts …

Affected versions

• gitlab-ce, gitlab-ee >= 19.4.0 < 19.4.2; >= 19.3.0 < 19.3.4; >= 10.3.0 < 19.2.8

By system

0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.