BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

GitLab

GitLab Security Releases - July 2026

gitlab-2026-07 Jul 1, 2026 Source: Vendor

GitLab security advisories for July 2026: 15 CVEs, 14 credited researchers.

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

16 lines
All 16 CVEs 16 Additional recognition 0 Unclaimed only
Showing 1–16 of 16
CVE-2025-12506 BR2026-0000-032544 unclaimed
Ambiguity Reference issue in a tag or branch impacts GitLab CE/EE
Credited as shells3c
CVE-2025-14562 BR2026-0000-032545 unclaimed
Incorrect Authorization issue in merge request collaboration settings impacts GitLab CE/EE
Credited as theluci
CVE-2026-11827 BR2026-0000-032546 unclaimed
Insufficiently Protected Credentials issue in repository mirroring impacts GitLab EE
Credited as rogerace
CVE-2026-12436 BR2026-0000-032547 unclaimed
Mass Assignment issue in Pipeline Schedule API impacts GitLab CE/EE
Credited as a0xnirudh
CVE-2026-13320 BR2026-0000-032548 unclaimed
HTML Injection in wiki markup rendering impacts GitLab CE/EE
Credited as youzslan
CVE-2026-13320 BR2026-0000-032549 unclaimed
HTML Injection in wiki markup rendering impacts GitLab CE/EE
Credited as a_m_a_m
CVE-2026-14341 BR2026-0000-032550 unclaimed
Improper Authorization issue in project import functionality impacts GitLab CE/EE
Credited as slide123
CVE-2026-14351 BR2026-0000-032551 unclaimed
Exposure of Sensitive Information issue in merge request title generation impacts GitLab CE/EE
Credited as toofikz
CVE-2026-3093 BR2026-0000-032552 unclaimed
Cross-site Scripting issue in paginated views impacts GitLab CE/EE
Credited as go7f0
CVE-2026-4672 BR2026-0000-032553 unclaimed
Improper Access Control issue in Pipeline Test Report API impacts GitLab CE/EE
Credited as rogerace
CVE-2026-6267 BR2026-0000-032554 unclaimed
Sensitive Information Exposure issue in Workhorse impacts GitLab CE/EE
Credited as thwin_htet
CVE-2026-6336 BR2026-0000-032555 unclaimed
Improper Access Control issue in project import status impacts GitLab CE/EE
Credited as 3nvz
CVE-2026-6352 BR2026-0000-032556 unclaimed
Incorrect Authorization issue in compliance violation management impacts GitLab EE
Credited as amanverasia
CVE-2026-6896 BR2026-0000-032557 unclaimed
Cross-site Scripting issue in vulnerability evidence table renderer impacts GitLab EE
Credited as yvvdwf
CVE-2026-7492 BR2026-0000-032558 unclaimed
Missing Authorization issue in commit discussion display impacts GitLab CE/EE
Credited as nathanaelhoun
CVE-2026-8472 BR2026-0000-032559 unclaimed
Improper Access Control issue in work items impacts GitLab EE
Credited as go7f0