{"uuid": "4b1f0d1e-9e36-4abb-acc8-9b192e228ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mvaycrguvb22", "content": "\ud83d\udea8GitLab releases 19.3.2, 19.2.6, 19.1.8 patch 2 critical CVEs:\n\nCVE-2026-85706: A 10.0 arbitrary file read via unauth path traversal in repo commits API, affecting CE and EE versions from 18.7.\n\nCVE-2026-87719: A 9.9 insecure deserialization via GraphQL subscription, affecting EE versions from 18.3.", "creation_timestamp": "2026-09-11T16:28:03.839124Z"}