Gitlab -- vulnerabilities

2026-10-23 · CVE-2026-110264, CVE-2026-15723, CVE-2026-112212, CVE-2026-12664, CVE-2026-16255, CVE-2026-105777, CVE-2026-13319, CVE-2026-112378, CVE-2026-105711, CVE-2026-14288, CVE-2026-112326, CVE-2026-103515 · VuXML entry

Gitlab reports: Integer Overflow issue in Regular Expression Compiler impacts GitLab CE/EE Improper Authentication issue in OmniAuth-to-LDAP auto-linking email lookup impacts GitLab CE/EE Cache Poisoning issue in OAuth/OIDC discovery endpoints impacts GitLab CE/EE Improper Access Control issue in GraphQL work item email address field impacts GitLab CE/EE Incomplete enforcement of instance-wide SAML/LDAP membership …

Affected versions

gitlab-ce, gitlab-ee >= 19.5.0 < 19.5.1; >= 19.4.0 < 19.4.3; >= 7.0.0 < 19.3.6

By system

0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.

System	Port	Version	State	Fixed
FreeBSD	www/gitlab	19.5.1_2	fixed	2026-10-23
MidnightBSD	www/gitlab	${GITLAB_VERSION}_${GITLAB_PORTREVISION}	out of range, by version

System

Port

Version

State

Fixed

FreeBSD

www/gitlab

19.5.1_2

fixed

2026-10-23

MidnightBSD

www/gitlab

${GITLAB_VERSION}_${GITLAB_PORTREVISION}

out of range, by version