UpHeron
All vulnerabilities

Servers and applications

CVE-2026-12053

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.1 that under certain conditions could have allowed a user to access sensitive information that had already been committed to a project, due to insufficient output filtering in Duo Workflows.

Severity
High 7.5
Published
25 Jun 2026
Last changed
26 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
GitLabServers and applications · cpe:a:gitlab:gitlab
  • Version 19.1.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-12053
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-12053