# GitLab 16.4.7: end of life

This release line no longer gets security fixes.

- Recommended: 19.3.6 (lowest fixed release that is still supported)
- Known vulnerabilities: 295 (7 critical, 65 high, 189 medium, 34 low)
- End of life: yes, since 2023-12-21 (release line 16.4)
- Data as of: 2026-10-24 21:52 UTC

## Vulnerabilities

| ID | Severity | Actively exploited | Fixed in |
|---|---|---|---|
| [CVE-2026-110264](https://gitlab.com/gitlab-org/gitlab/-/work_items/633633) | critical | no | 18.11.13 |
| [CVE-2024-6678](https://gitlab.com/gitlab-org/gitlab/-/issues/471923) | critical | no | 17.1.7 |
| [CVE-2024-0402](https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/) | critical | no | 16.5.8 |
| [CVE-2024-9164](https://gitlab.com/gitlab-org/gitlab/-/issues/493946) | critical | no | 17.2.9 |
| [CVE-2024-7102](https://gitlab.com/gitlab-org/gitlab/-/issues/474414) | critical | no | 17.5.0 |
| [CVE-2024-6385](https://gitlab.com/gitlab-org/gitlab/-/issues/469217) | critical | no | 16.11.6 |
| [CVE-2024-5655](https://gitlab.com/gitlab-org/gitlab/-/issues/465862) | critical | no | 16.11.5 |
| [CVE-2026-84739](https://gitlab.com/gitlab-org/gitlab/-/work_items/627316) | high | no | 19.2.7 |
| [CVE-2026-7481](https://gitlab.com/gitlab-org/gitlab/-/work_items/598646) | high | no | 18.9.7 |
| [CVE-2026-6896](https://gitlab.com/gitlab-org/gitlab/-/work_items/597887) | high | no | 18.11.7 |

And 285 more with lower severity.

## Notes

- 6 GitLab vulnerabilities are still under review and not included in this verdict.

Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.

---

FixedIn gives information, not guarantees. Always confirm with the vendor's advisory before you rely on a result. Source: https://fixedin.dev/gitlab/16.4.7 · JSON: https://fixedin.dev/gitlab/16.4.7.json · MCP server: https://fixedin.dev/mcp · About these addresses: https://fixedin.dev/llms.txt