GitLab has remediated a set of multiple vulnerabilities affecting both Community and Enterprise Editions from version 12.0 through versions prior to 19.0.2. The vulnerabilities span various CWE categories such as CWE-79 (Cross-site Scripting), CWE-1021, CWE-770, CWE-863, CWE-639, CWE-918, and CWE-153, indicating issues related to input validation, access control, and other security weaknesses. The advisory from the Nationaal Cyber Security Centrum (NCSC-2026-0196) covers 12 CVEs including CVE-2026-10087 and others. No CVSS scores are provided, and no known exploits have been observed in the wild. Patch links are not provided in the source data, but the advisory confirms that fixes have been made available.

The vulnerabilities potentially allow attackers to exploit various security weaknesses such as cross-site scripting, improper access control, and other flaws in GitLab versions from 12.0 up to before 19.0.2. These could lead to unauthorized actions or information disclosure if exploited. However, no active exploitation has been reported to date.

Official fixes have been released by GitLab for the affected versions. Users should apply the updates to versions 19.0.2 or later where these vulnerabilities have been addressed. Since this is not a cloud service, remediation depends on users applying the patches. Patch status is confirmed by the advisory, but specific patch links were not provided in the source data. Users should consult the official GitLab security advisories or the Nationaal Cyber Security Centrum advisory NCSC-2026-0196 for detailed patching instructions.