The current version of GitLab is 19.4.1 (as of 22/09/2026). patchletter checks the official source daily and emails you new releases.
Actively exploited vulnerabilities
The US cybersecurity agency CISA lists these vulnerabilities in its catalog of Known Exploited Vulnerabilities. What CISA does not carry does not appear in this list — even where it is being exploited.
- CVE-2023-7028GitLab Community and Enterprise Editions Improper Access Control Vulnerability
9.8 critical · over the network, without login · CISA deadline was 22 May 24
- CVE-2021-22175GitLab Server-Side Request Forgery (SSRF) Vulnerability
9.8 critical · over the network, without login · CISA deadline was 11 Mar
Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.
BSI security advisories
Advisories the German BSI (CERT-Bund) published for this product. Whether your version is affected is stated in the advisory itself.
- GitLab CE/EE: Mehrere Schwachstellen
WID-SEC-W-2026-1010 · 8 Oct
- Rsync: Mehrere Schwachstellen
WID-SEC-W-2025-0084 · 5 Oct
- GitLab: Mehrere Schwachstellen
WID-SEC-W-2026-3315 · 30 Sept
- GitLab: Mehrere Schwachstellen
WID-SEC-W-2026-3556 · 30 Sept
- libpng: Mehrere Schwachstellen
WID-SEC-W-2025-2663 · 16 Sept
- GitLab: Mehrere Schwachstellen
WID-SEC-W-2026-3029 · 28 Aug
- GitLab: Mehrere Schwachstellen ermöglichen Manipulation von Dateien
WID-SEC-W-2026-2882 · 20 Aug
- GitLab: Mehrere Schwachstellen
WID-SEC-W-2026-2805 · 13 Aug
GitLab at a glance
GitLab is a comprehensive DevOps platform — Git hosting, CI/CD, issues and more — often self-hosted. GitLab ships monthly releases plus frequent security patch releases; as a system holding source code, CI credentials and often internet-facing, prompt patching is essential.
For admins the monthly security releases are the rhythm: apply them quickly, since GitLab flaws are found and exploited regularly. Updates (Omnibus or Helm) run database migrations — back up first and follow the documented upgrade path, not skipping required stops. Check the version and its supported upgrade path before jumps. GitLab belongs behind TLS with strong authentication (SSO, two-factor). Runners execute pipeline code and hold secrets — isolate them. Subscribe to GitLab's security releases; patchletter flags new versions.
Support cycles (endoflife.date)
| Cycle | Latest version | Status |
|---|---|---|
| 19.4 | 19.4.1 | EOL in 67 days |
| 19.3 | 19.3.3 | EOL in 39 days |
| 19.2 | 19.2.7 | EOL in 4 days |
| 19.1 | 19.1.8 | End of Life |
| 19.0 | 19.0.9 | End of Life |
| 18.11 | 18.11.12 | End of Life |
| 18.10 | 18.10.8 | End of Life |
| 18.9 | 18.9.8 | End of Life |
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| 19.4.1 | STABLE | 22/09/2026 | – |
| 19.4.0 | STABLE | 16/09/2026 | – |
| 19.3.3 | STABLE | 22/09/2026 | – |
| 19.3.2 | STABLE | 10/09/2026 | – |
| 19.3.1 | STABLE | 25/08/2026 | – |
| 19.3.0 | STABLE | 20/08/2026 | – |
| 19.2.7 | STABLE | 22/09/2026 | – |
| 19.2.6 | STABLE | 10/09/2026 | – |
| 19.2.5 | STABLE | 25/08/2026 | – |
| 19.2.4 | STABLE | 14/08/2026 | – |
| 19.2.2 | STABLE | 11/08/2026 | – |
| 19.2.1 | STABLE | 29/07/2026 | – |
| 19.2.0 | STABLE | 15/07/2026 | – |
| 19.1.8 | STABLE | 10/09/2026 | – |
| 19.1.7 | STABLE | 25/08/2026 | – |
| 19.1.6 | STABLE | 14/08/2026 | – |
| 19.1.4 | STABLE | 12/08/2026 | – |
| 19.1.3 | STABLE | 29/07/2026 | – |
| 19.1.2 | STABLE | 07/07/2026 | – |
| 19.1.1 | STABLE | 23/06/2026 | – |
| 19.0.9 | STABLE | 22/09/2026 | – |
| 19.0.8 | STABLE | 14/08/2026 | – |
| 19.0.6 | STABLE | 12/08/2026 | – |
| 19.0.5 | STABLE | 29/07/2026 | – |
| 19.0.4 | STABLE | 07/07/2026 | – |
| 19.0.3 | STABLE | 23/06/2026 | – |
| 18.11.12 | STABLE | 22/09/2026 | – |
| 18.11.11 | STABLE | 14/08/2026 | – |
| 18.11.9 | STABLE | 06/08/2026 | – |
| 18.11.8 | STABLE | 03/08/2026 | – |
| 18.11.7 | STABLE | 07/07/2026 | – |
| 18.11.6 | STABLE | 23/06/2026 | – |
| 18.10.8 | STABLE | 10/06/2026 | – |
| 18.9.8 | STABLE | 25/05/2026 | – |
| 18.8.11 | STABLE | 29/06/2026 | – |
| 18.7.7 | STABLE | 25/05/2026 | – |
| 18.6.8 | STABLE | 26/05/2026 | – |
| 18.5.7 | STABLE | 26/05/2026 | – |
| 18.4.6 | STABLE | 10/12/2025 | – |
| 18.3.6 | STABLE | 11/11/2025 | – |
| 18.2.8 | STABLE | 08/10/2025 | – |
| 18.1.6 | STABLE | 09/09/2025 | – |
| 18.0.6 | STABLE | 12/08/2025 | – |
| 17.11.7 | STABLE | 14/08/2025 | – |
| 17.10.8 | STABLE | 11/06/2025 | – |
| 17.9.8 | STABLE | 07/05/2025 | – |
| 17.8.7 | STABLE | 09/04/2025 | – |
| 17.7.7 | STABLE | 11/03/2025 | – |
| 17.6.5 | STABLE | 11/02/2025 | – |
| 17.5.5 | STABLE | 08/01/2025 | – |
Frequently asked questions
- What is the latest version of GitLab?
- GitLab 19.4.1, released 22/09/2026. patchletter checks the vendor's official source daily for new releases.
- Where can I find the GitLab release notes?
- The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
- How do I get notified about new GitLab updates?
- Tick GitLab off in the catalogue and leave your address. From then on new versions go out by email — one at a time, or bundled in the daily or weekly digest.
An email as soon as a new GitLab version ships
We reconcile the vendor source daily. When a new version appears, it lands in your inbox right away or bundled as a digest. The update email is free and ends with one click. Alerts about vulnerabilities and end of support are part of patchletter Pro.
Embed this badge
The badge shows the current GitLab version and keeps it up to date. Anyone may embed it, no account needed.
[](https://patchletter.com/en/software/gitlab)https://patchletter.com/badge/gitlab.svgAlso available: ?v=eol (end of support) and ?v=cve (actively exploited).
