PHP2Shell: GitLab helps find and remediate critical PHP flaws
GitLab is not affected by PHP2Shell (CVE-2026-109618 and CVE-2026-109619). The GitLab application is not written in PHP and does not run it to serve web requests, and our Security team has found no evidence of impact to GitLab-managed infrastructure. GitLab.com, GitLab Self-Managed, and GitLab…
Sources
Vulnerabilities
Why this score
| Signal | Points |
|---|---|
| cvss critical — 9.2 | 20 |