CVE-2018-19580: GitLab

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made.

Affected products

• GitLab GitLab: before 11.3.11 (fixed in 11.3.11); from 11.3.12, before 11.4.8 (fixed in 11.4.8); from 11.4.9, before 11.5.1 (fixed in 11.5.1)

Published 2019-07-10. Last modified 2026-06-17.