Mmastodon TechnologyCybersecurity first seen 23 h ago, last 23 h ago, peak #11

GitLab patches high-severity stored XSS flaw CVE-2026-84739

Original: 🟠 CVE-2026-84739 - High (8.7) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19

GitLab has released fixes for CVE-2026-84739, a high-severity vulnerability (CVSS 8.7) affecting all versions of GitLab CE/EE from 13.11 onwards. Under certain conditions, the flaw could have let an authenticated user execute arbitrary JavaScript in another user's browser. Patches are available in versions 19.2.7, 19.3.3 and 19.4.1, and self-hosted installations are urged to upgrade promptly.

Why now: Security teams are monitoring the advisory so they can patch their GitLab instances before the flaw is exploited.

GitLabCVE-2026-84739

Open on mastodon →

Evidence

• 🟠 CVE-2026-84739 - High (8.7) GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary JavaScript in… · thehackerwire

API: https://socialmediatrends-api.osmike.com/v1/trends/363642