GitLab security advisory (AV26-1074)

Serial Number: AV26-1074
Date: October 22, 2026

As of October 21, 2026, GitLab is affected by vulnerabilities in the following product:

• GitLab Community Edition (CE) and Enterprise Edition (EE)
  • Prior to 18.11.13
  • Prior to 19.0.10
  • Prior to 19.1.9
  • Prior to 19.2.9
  • Prior to 19.3.6
  • Prior to 19.4.3
  • Prior to 19.5.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13
• GitLab release notes