Tag: CVE-2026-19478

CSBadmin

Unauthenticated GraphQL injection lets strangers wipe GitLab projects

GitLab shipped emergency patches for a critical GraphQL code injection flaw that lets unauthenticated attackers modify or delete public projects.