BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

GitLab

GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8

patch-release-gitlab-19-0-2-released Jun 10, 2026 Source: Vendor

Imported by the GitLab patch release catcher from https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-0-2-released/. 12 CVE sections listed. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-0-2-released/
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

11 lines
All 11 CVEs 11 Additional recognition 0 Unclaimed only
Showing 1–11 of 11
CVE-2026-6552 BR2026-0000-008740 unclaimed
Improper Access Control issue in Group SAML Identity API impacts GitLab EE
Credited as cyberjoker
CVE-2026-10087 BR2026-0000-008741 unclaimed
Cross-site Scripting issue in Analytics Dashboard impacts GitLab EE
Credited as yvvdwf
CVE-2026-7250 BR2026-0000-008742 unclaimed
Denial of Service issue in Grape API JSON parsing middleware impacts GitLab CE/EE
Credited as svalkanov
CVE-2026-8589 BR2026-0000-008743 unclaimed
HTML injection issue in certain group setting fields impacts GitLab EE
Credited as go7f0
CVE-2026-1500 BR2026-0000-008744 unclaimed
Denial of Service issue in Group Placeholder Reassignments API impacts GitLab CE/EE
Credited as a92847865
CVE-2026-6269 BR2026-0000-008745 unclaimed
Improper Access Control issue in Merge Requests API impacts GitLab CE/EE
Credited as rogerace
CVE-2026-9204 BR2026-0000-008746 unclaimed
Server-Side Request Forgery issue in Gitaly repository import impacts GitLab CE/EE
Credited as AndresAIFR
CVE-2026-6277 BR2026-0000-008747 unclaimed
Improper Access Control issue in Security Inventory impacts GitLab EE
Credited as mateuszek
CVE-2026-6976 BR2026-0000-008748 unclaimed
Authorization Bypass issue in Merge Request diff impacts GitLab CE/EE
Credited as xorz
CVE-2026-3553 BR2026-0000-008749 unclaimed
Improper Access Control issue in Todos API impacts GitLab CE/EE
Credited as go7f0
CVE-2026-9694 BR2026-0000-008750 unclaimed
Improper Neutralization issue in Service Desk email template impacts GitLab CE/EE
Credited as 3nvz