#graphql
-
Critical GitLab Vulnerability CVE-2026-19478 Comes Under Exploitation Within Days
A fresh GitLab flaw rated CVSS 9.4 lets an unauthenticated attacker overwrite and delete public projects. According to watchTowr, real-world attacks began almost immediately after disclosure.
-
Critical GraphQL Flaw in GitLab Lets Attackers Delete Public Projects Without Authorization
GitLab has shipped an out-of-band security update closing the critical flaw CVE-2026-19478, rated CVSS 9.4, which under certain conditions gives an unauthenticated attacker the ability to modify and delete public projects and user data.