← Back to CVE search

CVE-2026-8330

GitLab

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed sensitive information to be written to application logs due to insufficient filtering in a CI/CD API endpoint.

CVSS 4.4EPSS 0.13%Risk 0.45
View source
Published
2026-06-25 05:16:55
Affected versions
<18.11.6, <19.0.3, <19.1.1
Type
Critical software
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N