CVE-2026-5816
EUVD-2026-2504622.04.2026, 17:16
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.4 and 18.11 before 18.11.1 that could have allowed an unauthenticated user to execute arbitrary JavaScript in a user's browser session due to improper path validation under certain conditions.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| gitlab | gitlab | 18.10 ≤ 𝑥 < 18.10.4 | CNA |
| gitlab | gitlab | 18.11 ≤ 𝑥 < 18.11.1 | CNA |
