Our takeGitLab advisory AV26-1074 covers multiple vulnerabilities in self-hosted CE and EE instances prior to 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3 and 19.5.1. Update immediately if you run GitLab on-prem.Security Resilience desk
What this means for you — Security leader:Update self-hosted GitLab instances to 18.11.13+, 19.0.10+, 19.1.9+, 19.2.9+, 19.3.6+, 19.4.3+ or 19.5.1+ immediately.
What this means for you — Lean IT orgs:If you self-host GitLab, update it right away to one of the fixed versions listed in the advisory.
What this means for you — MSP:Audit all client GitLab instances for versions prior to 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3 or 19.5.1 and patch them.
What this means for you — Researcher:GitLab released fixes for multiple vulnerabilities in CE/EE versions prior to 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3 and 19.5.1.