GitLab
GitLab Patch Release: 19.3.1, 19.2.5, 19.1.7
patch-release-gitlab-19-3-1-released Aug 26, 2026 Source: Vendor
Imported by the GitLab patch release catcher from https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-1-released/. 7 CVE sections listed. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-1-released/
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
7 lines
Showing 1–7 of 7
CVE-2026-18252
BR2026-0000-009512
unclaimed
Inclusion of Functionality from Untrusted Control Sphere issue in Duo Claude AI agent impacts GitLab EE
Credited as thwin_htet
CVE-2026-77801
BR2026-0000-009513
unclaimed
Denial of Service issue in import pipeline impacts GitLab CE/EE
Credited as Tran Ba Quang
CVE-2025-10903
BR2026-0000-009514
unclaimed
Denial of Service issue in SCIM API impacts GitLab EE
Credited as rafabd1
CVE-2026-3035
BR2026-0000-009515
unclaimed
Improper Access Control issue in protected environments impacts GitLab EE
Credited as go7f0
CVE-2026-4398
BR2026-0000-009516
unclaimed
Authorization Bypass issue in compliance framework assignment impacts GitLab EE
Credited as bountyyfi
CVE-2026-15387
BR2026-0000-009517
unclaimed
Improper Handling of Untrusted Data issue in Pipeline Execution Policies impacts GitLab EE
Credited as 3nvz
CVE-2026-7487
BR2026-0000-009518
unclaimed
Improper Authorization issue in merge request approval rules reset impacts GitLab EE
Credited as rogerace