---
type: "post"
id: "gitlab-critical-patch-release-19-5-1-19-a1d606"
slug: "gitlab-critical-patch-release-19-5-1-19-a1d606"
title: "GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13"
description: "GitLab released critical patch versions 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, and 18.11.13 for GitLab Community Edition and Enterprise Edition on October 21, 2026."
retrieval_nugget: "GitLab released critical patch versions 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, and 18.11.13 for GitLab Community Edition and Enterprise Edition on October 21, 2026."
published_at: "2026-10-24"
updated_at: "2026-10-24"
record_date: "2026-10-24"
date_kind: "published_at"
topics: ["agent-security","sandbox"]
entities: ["GitLab","GitLab Community Edition","GitLab Enterprise Edition","CVE-2026-110264"]
related_patterns: ["agent-security-moves-to-runtime-boundaries"]
novelty_label: "same_event"
what_changed: "Same event as Update GitLab by matching your installation to the patched versions ."
prior_refs: ["memory:2fbd2085-b391-8db5-a444-3bdac0736924"]
source_url: "https://docs.gitlab.com/releases/patch-releases.xml"
source_urls: ["https://docs.gitlab.com/releases/patch-releases.xml"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:gitlab-critical-patch-release-19-5-1-19-a1d606"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/posts/gitlab-critical-patch-release-19-5-1-19-a1d606/","markdown":"https://newruntime.com/posts/gitlab-critical-patch-release-19-5-1-19-a1d606.md","json":"https://newruntime.com/posts/gitlab-critical-patch-release-19-5-1-19-a1d606.json"}
---

# GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13

## Retrieval answer

GitLab released critical patch versions 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, and 18.11.13 for GitLab Community Edition and Enterprise Edition on October 21, 2026.

GitLab released critical patch versions 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, and 18.11.13 for GitLab Community Edition and Enterprise Edition on October 21, 2026.

The release fixes CVE-2026-110264, an integer-overflow issue in the regular-expression compiler. GitLab says that, under certain conditions, an unauthenticated user could execute arbitrary code on a GitLab server with a specially crafted regular expression. The vulnerability is rated CVSS 10.0.

Affected releases include CE/EE versions from 7.0 before 18.11.13, plus releases before the stated patch version in the 19.0 through 19.5 branches. GitLab says GitLab.com is already patched. GitLab Dedicated tenants on 19.3.5-internal0 and 19.4.2-internal0 or later do not need action; self-managed installations should upgrade. The company also published two detections for attempted exploitation. The release notice does not establish that the flaw has been exploited in the wild.

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Agent Security](https://newruntime.com/topics/agent-security.md): Explore the agent-security topic hub.
- topic hub: [Sandbox](https://newruntime.com/topics/sandbox.md): Explore the sandbox topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)