Tech Times on MSN
GitLab emergency patch: Third GraphQL flaw of 2026 lets unauthenticated attackers delete projects
GitLab vulnerability CVE-2026-19478 carries a CVSS 9.4 rating, letting unauthenticated attackers remotely delete or modify public projects with no login required. An emergency patch released August 17 ...
GitLab, the hugely popular devops platform, today announced the introduction of secrets detection with version 11.9 of the service. This means that should someone inadvertently include an API key or ...
A critical GitLab flaw lets unauthenticated hackers modify or delete public projects and user data via GraphQL, prompting an ...
A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential ...
Attacks on a recently unplanned closed vulnerability in GitLab have been observed. Attackers can, for example, delete ...
Attackers can exploit two security vulnerabilities to manipulate or even delete project data. In a warning message, the developers assure that they have fixed versions 18.11.11, 19.0.8, 19.1.6, and 19 ...
An open API, also called public API, is an application programming interface made publicly available to software developers. Open APIs are published on the internet and shared freely, allowing the ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results