Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to execute arbitrary scripts in another user's browser session due to improper sanitization of user-supplied input.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-11 | 1 | Patch1 |
| 2026-07-15 | 1 | General1 |
⚠️ Vulnerabilidades en productos GitLab ❗ CVE-2026-6896 ❗ CVE-2026-13320 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-gitlab-15/ https://t.co/7BwwpTCpeh
Post summary
The post lists two GitLab CVEs and provides links for more information, but offers no deeper technical insight, PoC, or exploitation details.
🚨 HIGH SEVERITY: CVE-2026-13320 CVSS 7.3 - GitLab CE/EE XSS vulnerability allows authenticated users to execute arbitrary scripts in victim browsers. Affects versions 15.7-18.11.6, 19.0-19.0.3, 19.1-19.1.1. Patch immediately! #CVE #Vulnerability #PatchNow https://t.co/5b9bkqAgPV
Post summary
The tweet announces a high‑severity GitLab XSS vulnerability (CVE‑2026‑13320) with technical details and urges users to apply the patch immediately, but provides no PoC, exploit code, or evidence of active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gitlab | gitlab | - | - | - |
| App | gitlab | gitlab | - | - | - |