GitLab security advisory (AV26-1028) - Update 1

Serial number: AV26-1028Date: October 13, 2026Updated: October 29, 2026 As of October 12, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Prior to 19.2.8 Prior to 19.3.5 Prior to 19.4.2 Update 1 On October 29, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-97229 to their Known Exploited Vulnerabilities (KEV) Catalog. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8 GitLab release notes | GitLab Docs CISA KEV: CVE-2026-97229