Vulnerabilities

CVSS

6.5 Medium

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Risk score

52.0

Published

2026-07-29

Status

Published

GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to merge code into a protected branch without the required approvals due to a race condition in approval rule processing.

Weaknesses

CWE-367

Coverage 1

vulnerability

Multiples vulnérabilités dans GitLab (30 juillet 2026)

Multiple vulnerabilities have been discovered in GitLab, including remote denial-of-service, data confidentiality breaches, and remote cross-site scripting (XSS). These vulnerabilities affect GitLab Community Edition and…

CERT-FR · Jul 30, 2026 Medium

CVE-2025-14562CVE-2026-12436CVE-2026-13113vulnerabilitygitlabcve

All articles mentioning it

Advisories and references

• gitlab.com/gitlab-org/gitlab/-/work_items/597838
• docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-1-release...