An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x…: 32 records in one advisory
32 records announced together, published between 2019-04-17 and 2023-04-15, every one of them citing the same advisory.
The advisory
Every record in this batch cites https://about.gitlab.com/blog/categories/releases/. That is the CNA's own reference, held in the index, and it is why these records are on one page.
What the records offer
No record in this batch publishes a fixed version in held sources.
No record in this batch is listed by CISA in held sources.
13 of 32 records name something of its own. For the other 19, held sources say the same thing about each.
What this page does not cover
This batch is 32 of the 146 records that cite the same advisory. The other 114 are different findings announced alongside it.
None of those 114 is grouped with any other. Each one has its own record page and nothing else.
The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.
Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.
32 records, read from the index as it stood on 2026-10-18. Every row opens the record it names, and every value on that record opens its own receipt.