Critical GitLab Flaw Allows Attackers to Delete and Modify Public Repos
9 Articles
9 Articles
Critical GitLab flaw allows attackers to delete and modify public repos
GitLab has fixed a critical vulnerability that could allow unauthenticated attackers to perform unauthorized modifications inside code repositories or to completely delete them with a single HTTP request. The patched releases also address a second high-risk cross-site request forgery (CSRF) flaw. The critical vulnerability, tracked as CVE-2026-19478, is described as a code injection issue through the GraphQL directive and was reported privately …
GitLab environments can be attacked via two now closed vulnerabilities.
GitLab released yesterday (Monday, August 17th), an emergency fix, completely outside its usual calendar, for a flaw that allows someone without an account or password to modify or delete your public projects and user data. Hey yeah it's hot and that's why its CVSS score is 9.4 out of 10. 5 days earlier, on August 12, GitLab published its routine patch for 19.2, 19.1 and 19.0. It's a normal perimeter since its maintenance policy covers only the …
A critical GitLab GraphQL vulnerability could allow an unauthenticated attacker to delete a public project.
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
