GitLab CE / EE security note

CVE-2026-97229 — Patch now

CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab

Affected < 19.2.8

CVE-2026-111943 — Check if you run it

Distrust compromised intermediate certificates in crypto/x509

Fixed in 1.26.10 · 2 other ranges on the advisory

CVE-2022-51026 — Check if you run it

Bytebase vulnerable to Improper Authentication

Fixed in 1.0.1

MAL-2026-18358 — Open the advisory

Malicious code in @testsecuiitytestme/cache-helper (npm)

Seen in 1.0.1 · 2 other packages on the advisory

CVE-2026-93577 — Check if you run it

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have a

Fixed in 3.3.13-r0 · 1 other ranges on the advisory

CVE-2026-76418 — Patch now

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

No version range is stored, so an installed version cannot be checked.

CVE-2026-102649 — Check if you run it

Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator.

No version range is stored, so an installed version cannot be checked.