← Database

CVE-2026-5954

MEDIUM CVSS: 4.2 Published: 2026-10-13 Modified: 2026-10-13

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks.

Affected Platforms

Unknown

Weakness Type

CWE-863

References