CVE-2026-1230
Medium · 4.1CVSS
4.1
EPSS
0.2%
Published
Mar 11, 2026
CISA due date
—
The record
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 1.0 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to cause repository downloads to contain different code than displayed in the web interface due to incorrect validation of branch references under certain circumstances.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-114663 Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default… CWE-706
- CVE-2026-14288 GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before… CWE-706
- CVE-2026-92262 MariaDB server is a community developed fork of MySQL server. CWE-706
- CVE-2026-107822 MariaDB server is a community developed fork of MySQL server. CWE-706
- CVE-2026-92951 vm2 before 3.11.7 contains an incorrect authorization vulnerability in the external… CWE-706
- CVE-2026-87618 Incorrect reference resolution in Storage in Google Chrome on on Windows prior to… CWE-706
- CVE-2026-87613 Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36… CWE-706
- CVE-2026-87562 Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to… CWE-706