GitLab

GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11

patch-release-gitlab-19-2-4-released Aug 17, 2026 Source: Vendor

Imported by the GitLab patch release catcher from https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/. 2 CVE sections listed. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/

Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

2 lines

Showing 1–2 of 2

CVE-2026-19478 BR2026-0000-007369 unclaimed

Code Injection issue via GraphQL directive impacts GitLab CE/EE

Credited as hiimguardian

CVE-2026-19650 BR2026-0000-007370 unclaimed

Cross-Site Request Forgery issue in GraphQL multiplex query handler impacts GitLab CE/EE

Credited as kreep