GitLab security advisories, April 2026

Every GitLab security advisory published in April 2026, from GitLab ([email protected] CNA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 22
Critical: 0
High: 6
In CISA KEV: 0
CVEs: 22

GitLab advisories published in April 2026

Apr 22, 2026
High [CVE-2026-5816] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.4 and 18.11 before 18.11.1
High8.0
Apr 22, 2026
High [CVE-2026-5262] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.1.0 before 18.9.6, 18.10 before 18.10.4, and 18.11…
High8.0
Apr 22, 2026
High [CVE-2026-4922] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 18.9.6, 18.10 before 18.10.4, and 18.11…
High8.1
Apr 22, 2026
Medium [CVE-2026-6515] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.9.6, 18.10 before 18.10.4, and 18.11…
Medium5.4
Apr 22, 2026
Medium [CVE-2026-5377] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1
Medium4.3
Apr 22, 2026
Medium [CVE-2026-1660] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.9.6, 18.10 before 18.10.4, and 18.11…
Medium6.5
Apr 22, 2026
Medium [CVE-2025-6016] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.9.6, 18.10 before 18.10.4, and 18.11…
Medium6.5
Apr 22, 2026
Medium [CVE-2025-3922] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.4 before 18.9.6, 18.10 before 18.10.4, and 18.11…
Medium6.5
Apr 22, 2026
Medium [CVE-2025-0186] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.9.6, 18.10 before 18.10.4, and 18.11…
Medium6.5
Apr 22, 2026
Low [CVE-2026-3254] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that under certain conditions
Low3.5
Apr 22, 2026
Low [CVE-2025-9957] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.2 before 18.9.6, 18.10 before 18.10.4, and 18.11…
Low2.7
Apr 8, 2026
High [CVE-2026-5173] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9.6 before 18.8.9, 18.9 before 18.9.5, and 18.10…
High8.5
Apr 8, 2026
High [CVE-2026-1092] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.8.9, 18.9 before 18.9.5, and 18.10…
High7.5
Apr 8, 2026
High [CVE-2025-12664] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 18.8.9, 18.9 before 18.9.5, and 18.10…
High7.5
Apr 8, 2026
Medium [CVE-2026-4332] GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before…
Medium5.4
Apr 8, 2026
Medium [CVE-2026-2619] GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before…
Medium4.3
Apr 8, 2026
Medium [CVE-2026-2104] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10…
Medium4.3
Apr 8, 2026
Medium [CVE-2026-1752] GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before…
Medium4.3
Apr 8, 2026
Medium [CVE-2026-1516] GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10…
Medium5.7
Apr 8, 2026
Medium [CVE-2026-1101] GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before…
Medium6.5
Apr 8, 2026
Medium [CVE-2025-9484] GitLab has remediated an issue in GitLab EE affecting all versions from 16.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before…
Medium4.3
Apr 8, 2026
Low [CVE-2026-4916] GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10…
Low2.7

Get an email when GitLab publishes the next one.

See GitLab's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about GitLab

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.