GitLab has patched two security flaws, including CVE-2026-19478, a critical code injection vulnerability that could allow unauthenticated attackers to remotely modify or delete public projects and user data. The disclosure adds to the growing list of GitLab vulnerabilities requiring prompt attention from organizations running self-managed instances. 

GitLab has released versions 19.2.4, 19.1.6, 19.0.8 and 18.11.11 for Community Edition (CE) and Enterprise Edition (EE). The company described the releases as containing important bug and security fixes and strongly recommended that affected self-managed installations be upgraded immediately. 
CVE-2026-19478 Among Critical GitLab Vulnerabili...