What is GHSA-f5mm-69gv-w857?

GHSA-f5mm-69gv-w857 is a security advisory published by GitHub Security Advisories with High severity. GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2...

Which CVE IDs does GHSA-f5mm-69gv-w857 cover?

GHSA-f5mm-69gv-w857 covers the following CVE IDs: CVE-2026-88765. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f5mm-69gv-w857?

GHSA-f5mm-69gv-w857 has a CVSS v3 base score of 8.5, published by GitHub Security Advisories.

GHSA-f5mm-69gv-w857HighCVSS 8.5

GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2...

Vendor

GitHub Security Advisories

Published

September 15, 2026

Last Modified

September 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-88765 →

📋 Description

GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 under certain conditions could allow an authenticated user to achieve remote code execution by importing a specially crafted Git project export to overflow the Unicode conversion buffer used in Advanced Search indexing.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-88765
https://hackerone.com/reports/3990469
https://gitlab.com/gitlab-org/gitlab/-/work_items/627435
https://github.com/advisories/GHSA-f5mm-69gv-w857