CVE-2026-14814

Vendor

GitLab

Product

GitLab

CVSS

8.2

EPSS

0.27 (p98)

Exposure class

Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 42
   GitLab release GitLab 20d ago

   GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8

   On October 12, 2026, we released versions 19.4.2, 19.3.5, 19.2.8 for GitLab Community Edition (CE) and Enterprise Edition (EE). 19.3.4 had a bug that affected merge request pages when the Ona integration was enabled. This is…

   EPSS 0.27 Fix available CVE-2026-97229CVE-2026-92883CVE-2026-16301+21 more GitLab
2. 15
   CVE NVD 19d ago

   GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain…

   GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw…

   CVSS 8.2 CVE-2026-14814 GitLab