Is GitLab 19.3.4 affected?

Oct 7, 2026 · Release notes ↗

CVSS 10.0

24 known vulnerabilities affect 19.3.4 (highest CVSS 10.0).

8 newer releases in its track, up to 19.5.1. What changed up to 19.5.1

Vulnerabilities affecting 19.3.4

10.0
CVE-2026-97229 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unaut… fixed in 19.3.5
8.7
CVE-2026-92883 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an auth… fixed in 19.3.5
8.5
CVE-2026-16301 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authe… fixed in 19.3.5
8.2
CVE-2026-14814 GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison c… fixed in 19.3.5
7.7
CVE-2026-81839 GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenti… fixed in 19.3.5
7.3
CVE-2026-96893 GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenti… fixed in 19.3.5
6.2
CVE-2026-101168 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authe… fixed in 19.3.5
5.8
CVE-2026-7767 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an auth… fixed in 19.3.5
5.3
CVE-2026-84284 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, all 19.3 versions, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unaut… fixed in 19.4.2
5.3
CVE-2026-85529 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unaut… fixed in 19.3.5
5.3
CVE-2026-16275 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unaut… fixed in 19.3.5
4.6
CVE-2026-100755 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configurations, could have a… fixed in 19.3.5
4.3
CVE-2026-6567 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authe… fixed in 19.3.5
4.3
CVE-2026-14210 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an auth… fixed in 19.3.5
4.3
CVE-2026-14552 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authe… fixed in 19.3.5
4.3
CVE-2026-104661 GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenti… fixed in 19.3.5
4.3
CVE-2026-105458 GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenti… fixed in 19.3.5
4.2
CVE-2026-92528 GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authent… fixed in 19.3.5
4.2
CVE-2026-5954 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user t… fixed in 19.3.5
4.2
CVE-2026-78335 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authe… fixed in 19.3.5
3.5
CVE-2026-100104 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authe… fixed in 19.3.5
3.1
CVE-2026-82632 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authe… fixed in 19.3.5
2.7
CVE-2026-9268 GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenti… fixed in 19.3.5
2.7
CVE-2026-103549 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authe… fixed in 19.3.5

Newer releases

19.5.1	Oct 20, 2026	19.3.4 → 19.5.1
19.5.0	Oct 15, 2026	19.3.4 → 19.5.0
19.4.3	Oct 20, 2026	19.3.4 → 19.4.3
19.4.2	Oct 7, 2026	19.3.4 → 19.4.2
19.4.1	Sep 22, 2026	19.3.4 → 19.4.1
19.4.0	Sep 16, 2026	19.3.4 → 19.4.0
19.3.6	Oct 20, 2026	19.3.4 → 19.3.6
19.3.5	Oct 12, 2026	19.3.4 → 19.3.5