GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8
On October 12, 2026, we released versions 19.4.2, 19.3.5, 19.2.8 for GitLab Community Edition (CE) and Enterprise Edition (EE). 19.3.4 had a bug that affected merge request pages when the Ona integration was enabled. This is fixed in 19.3.5. These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. All GitLab Dedicated tenants were patched using an internal release before this patch release was published. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch releases: scheduled releases and
Read at GitLab patch and security releases
- Vendor
- GitLab
- Product
- GitLab
- EPSS
- 0.27 (p98)
- Fix
- available
- Exposure class
- Developer platform
Why it ranks 42 (Notable)
- EPSS 0.18 (elevated)
- Product class: developer platform
- Widely deployed vendor product (GitLab)
- Covered by 7 independent sources
- Fix available
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- GitLab patch and security releases (docs.gitlab.com)
- CVE-2026-97229 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-92883 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-16301 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-14814 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-81839 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.