Tag

#graphql

1 story tagged graphql.

GitLab CVE-2026-19478 exploited within days of patch release

GitLab CVE-2026-19478, a CVSS 9.4 GraphQL injection flaw, lets unauthenticated attackers delete repos and forge merges. It is already exploited in the wild.

Data Today Security Desk · Aug 23, 2026