CVE-2026-15216

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.2 through 19.0.5 GitLab CE/EE versions 19.1 through 19.1.3 GitLab CE/EE versions 19.2 through 19.2.1

Description An issue exists where improper neutralization of user-controlled data rendered in pagination controls by an analytics dashboard component could allow cross-site scripting (XSS), a technique where malicious scripts are injected into trusted websites.

Recommendations Update GitLab CE/EE versions 18.2 through 19.0.5 to version 19.0.6. Update GitLab CE/EE versions 19.1 through 19.1.3 to version 19.1.4. Update GitLab CE/EE versions 19.2 through 19.2.1 to version 19.2.2.