SecurityThe Hacker Newsabout 3 hours ago
Critical GitLab GraphQL Flaw Allows Unauthenticated Project Deletion
1 min read
GitLab patched CVE-2026-19478, a critical GraphQL flaw rated 9.4, letting unauthenticated attackers modify or delete public projects. Fixes ship in versions 19.2.4, 19.1.6, 19.0.8, and 18.11.11. GitLab.com and Dedicated are already patched. A second high-severity CSRF issue, CVE-2026-19650, also received fixes.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
