GitLab security advisory (AV26-406) – Canadian Centre for Cyber Security

Serial number: AV26-406
Date: April 30, 2026

On April 29, 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitLab Community Edition (CE) – versions prior to 18.11.2 and 18.10.5
• GitLab Enterprise Edition (EE) – versions prior to 18.11.2 and 18.10.5

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.