High severity8.6NVD Advisory· Published Jun 25, 2026· Updated Jun 26, 2026
CVE-2026-12053
CVE-2026-12053
Description
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.1 that under certain conditions could have allowed a user to access sensitive information that had already been committed to a project, due to insufficient output filtering in Duo Workflows.
Affected products
3- Range: 19.1 <= 19.1.1
- cpe:2.3:a:gitlab:gitlab:19.1.0:*:*:*:enterprise:*:*:*
Patches
Vulnerability mechanics
References
2- docs.gitlab.com/releases/patches/patch-release-gitlab-19-1-1-released/nvdRelease NotesVendor Advisory
- hackerone.com/reports/3757762nvdPermissions Required
News mentions
0No linked articles in our index yet.