Vulnerability Details CVE-2026-7514
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with developer-role permissions could substitute package file content and hide packages from their owners due to improper authorization checks in the Generic Package Registry.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 25.8%
CVSS Severity
CVSS v3 Score 4.3