CRITICAL GITLAB GRAPHQL FLAW COULD LET UNAUTHENTICATED ATTACKERS DELETE PUBLIC PROJECTS

Summary from the TLDR InfoSec newsletter

GitLab has patched CVE-2026-19478, a CVSS 9.4 GraphQL flaw affecting self-managed CE and EE instances.