Gitlab -- vulnerabilities

2026-06-12 · CVE-2026-6552, CVE-2026-10087, CVE-2026-7250, CVE-2026-8589, CVE-2026-1500, CVE-2026-6269, CVE-2026-9204, CVE-2026-10733, CVE-2026-6277, CVE-2026-6976, CVE-2026-3553, CVE-2026-9694 · VuXML entry

Gitlab reports: Improper Access Control issue in Group SAML Identity API impacts GitLab EE Cross-site Scripting issue in Analytics Dashboard impacts GitLab EE Denial of Service issue in Grape API JSON parsing middleware impacts GitLab CE/EE HTML injection issue in certain group setting fields impacts GitLab EE Denial of Service issue in Group Placeholder Reassignments API impacts GitLab CE/EE Improper Access Control …

Affected versions

• gitlab-ce, gitlab-ee >= 19.0.0 < 19.0.2; >= 18.11.0 < 18.11.5; >= 12.0.0 < 18.10.8

By system

0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.