Critical GitLab Flaw Lets Hackers Alter or Delete Public Projects

GitLab has patched two security flaws, including CVE-2026-19478, a critical code injection vulnerability that could allow unauthenticated attackers to remotely modify or delete public projects and user data. The disclosure adds to the growing list of GitLab vulnerabilities requiring prompt attention from organizations running self-managed instances. GitLab has released versions 19.2.4, 19.1.6,…