The Hacker News

GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

GitLab CVE-2026-19478 is under active exploitation, with unauthenticated attacks able to modify or delete public projects ...

GitLabが緊急パッチ公開、未認証で公開プロジェクトを改変・削除さ ...

GitLabは2026年8月17日、Community Edition（CE）およびEnterprise ...
Tech Times on MSN

GitLab emergency patch: Third GraphQL flaw of 2026 lets unauthenticated attackers delete ...

GitLab vulnerability CVE-2026-19478 carries a CVSS 9.4 rating, letting unauthenticated attackers remotely delete or modify public projects with no login required. An emergency patch released August 17 ...
Cybernews

Critical GitLab flaw lets hackers delete or rewrite repositories – now exploited in wild

A critical GitLab flaw lets unauthenticated hackers modify or delete public projects and user data via GraphQL, prompting an ...

Attack attempts on GitLab vulnerability observed

Attacks on a recently unplanned closed vulnerability in GitLab have been observed. Attackers can, for example, delete ...

Critical security vulnerability in GitLab: Attackers can delete projects

Attackers can exploit two security vulnerabilities to manipulate or even delete project data. In a warning message, the developers assure that they have fixed versions 18.11.11, 19.0.8, 19.1.6, and 19 ...
IoT NEWS

GitLab、AIエージェントの応答速度を最大11倍高速化するコンテキスト ...

同社の社内テストの実証結果によると、Orbitに接続されたAIエージェントは、リポジトリ内のファイルを自力で読み漁る同じエージェントと比較して、応答速度が最大11倍高速化し、消費トークン数を最大4.5倍削減することに成功した。
note

Claude CodeをGitLab CIで実行する方法｜最小権限のjob例

完成形：GitLab CIでClaude Codeを読み取り専用にする Claude CodeをGitLab CIで動かすなら、最初はコードを変更しない診断jobに限定するのが安全です。 GitLab CI/CDの保護済み変数にAPIキーを置き、Claude Codeは非対話の-pで実行し、許可する操作を差分の読み取りだけに ...
GitHub

Knuckles-Team/gitlab-api

This project started out as a python wrapper for GitLab, but since the dawn of standards like Model Context Protocol (MCP) and Agent2Agent (A2A) Agent, this repository has become a sandbox for some ...