PHP2Shell: GitLab helps find and remediate critical PHP flaws

GitLab is not affected by PHP2Shell (CVE-2026-109618 and CVE-2026-109619). The GitLab application is not written in PHP and does not run it to serve web requests, and our Security team has found no evidence of impact to GitLab-managed infrastructure. GitLab.com, GitLab Self-Managed, and GitLab…

security

Sources

Vulnerabilities

Why this score
Signals contributing to the severity score
SignalPoints
cvss critical — 9.220