Gitlab -- vulnerabilities

2026-06-06 · CVE-2026-4868, CVE-2026-1402, CVE-2026-6713, CVE-2026-5296, CVE-2026-2601, CVE-2026-8716, CVE-2026-2710 · VuXML entry

Gitlab reports: Improper Access Control issue in Duo AI workflow runners impacts GitLab EE Denial of Service issue in Wiki impacts GitLab CE/EE Incorrect Authorization issue in GraphQL WorkItem API impacts GitLab CE/EE Improper Authorization issue in Duo Workflows API impacts GitLab EE Missing Authorization issue in Operations impacts GitLab EE Incorrect Name Resolution issue in Pipelines impacts GitLab CE/EE …

Affected versions

• gitlab-ce, gitlab-ee >= 19.0.0 < 19.0.1; >= 18.11.0 < 18.11.4; >= 12.7.0 < 18.10.7

By system

0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.