GitLab security advisory (AV26-1028)

Serial number: AV26-1028
Date: October 13, 2026

As of October 12, 2026, GitLab is affected by vulnerabilities in the following product:

• GitLab
  • Prior to 19.2.8
  • Prior to 19.3.5
  • Prior to 19.4.2

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8
• GitLab release notes | GitLab Docs