GitLab CVE-2026-19478: Critical Flaw Under Attack

GitLab shipped an emergency patch on August 17, 2026 for a critical code injection flaw in its GraphQL API that lets an unauthenticated attacker modify or delete public projects and user data. Researc