CERT-FR warns of multiple GitLab CE/EE vulnerabilities including remote code execution, fixed in 19.3.6, 19.4.3 and 19.5.1
The CERT-FR published advisory CERTFR-2026-AVI-1363 on multiple vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE). Exploitation can lead to remote arbitrary code execution, breach of data confidentiality and security policy bypass. The advisory relays the vendor's security bulletin of 21 October 2026 and lists 1…