GitLab Issues Emergency Patches for Multiple Security Vulnerabilities

GitLab has released urgent security patches for versions 19.0.1, 18.11.4, and 18.10.7 to address seven vulnerabilities affecting both Community Edition (CE) and Enterprise Edition (EE). The flaws include access control issues in Duo AI workflows, a denial-of-service (DoS) vulnerability in the Wiki feature, and various authorization bugs across multiple endpoints. Self-managed installations are advised to upgrade immediately to mitigate potential exploitation. The vulnerabilities could allow unauthorized access and service disruptions, impacting a wide range of users relying on GitLab for development operations. GitLab's advisory emphasizes the critical nature of these updates for maintaining security integrity.

Key Points: • GitLab released patches for seven critical vulnerabilities affecting CE and EE. • Flaws include Duo AI access control issues and a Wiki DoS vulnerability. • Self-managed installations are urged to upgrade immediately to prevent exploitation.