GitLab security advisory (AV26-962)
Brief
Serial number: AV26-962 Date: September 25, 2026
As of September 23, 2026, GitLab is affected by vulnerabilities in the following product:
- GitLab
- Prior to 19.2.7
- Prior to 19.3.3
- Prior to 19.4.1
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
- GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7
- GitLab release notes
- GitLab Docs
GitLab security advisory (AV26-962) - Canadian Centre for Cyber Security