GitLab security advisory (AV26-1028)
Canada's Cyber Centre urges updates for critical GitLab patches before versions 19.2.8, 19.3.5, and 19.4.2.
The Canadian Centre for Cyber Security issued advisory AV26-1028 on October 13, 2026, warning that GitLab versions before 19.2.8, 19.3.5, and 19.4.2 are affected by vulnerabilities. It points administrators to GitLab's critical patch release of those three versions and urges them to apply available updates. The notice does not name CVE identifiers or say the flaws are being exploited.
- Advisory AV26-1028 was published on October 13, 2026.
- Affected GitLab releases are those before 19.2.8, 19.3.5, and 19.4.2.
- GitLab issued critical patches 19.4.2, 19.3.5, and 19.2.8.
- No CVE identifiers or active exploitation are stated.
Full article66 words · extracted from cyber.gc.ca · click to collapse
Serial number: AV26-1028
Date: October 13, 2026
As of October 12, 2026, GitLab is affected by vulnerabilities in the following product:
- GitLab
- Prior to 19.2.8
- Prior to 19.3.5
- Prior to 19.4.2
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
Text extracted automatically; images, tables and formatting may be missing. Original: https://cyber.gc.ca/en/alerts-advisories/gitlab-security-advisory-av26-1028