{"uuid": "4a7dfbfd-6cdd-434e-9db3-7fb1484a1a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/pphm_HackerNews/2685", "content": "\ud83d\udd34 GitLab Patches Critical Unauthenticated GraphQL Vulnerability\n\nGitLab patched a critical GraphQL flaw that let unauthenticated attackers remotely modify or delete public projects on self-managed servers.\n\nGitLab pushed out an emergency patch this week to address a critical flaw, tracked as CVE-2026-19478 (CVSS score of 9.4), that could let an attacker with zero credentials remotely modify or delete public projects and user data.\n\n\u201cGitLab has remediated an issue that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive.\u201d reads the advisory.", "creation_timestamp": "2026-08-21T23:00:05.782262Z"}