Gerrit

Products

Exploited and recent CVEs

• CVE-2026-87722 High 8.7 Regular Expression Denial of Service (ReDoS) in Search Query Predicates and REST Filter Endpoints in Gerrit Code Review 0.3%
• CVE-2026-87721 High 8.7 Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review 0.3%
• CVE-2026-87720 High 7.6 Incorrect Authorization via Stale ProjectCache Eviction and Repeated .git Suffixes in Gerrit Code Review 0.3%
• CVE-2026-2725 Medium 6.0 Improper Authorization in Gerrit allowing Code Review Bypass via "Submitted Together" 0.1%
• CVE-2020-8920 Low 3.5 Overoptimization leads to private information leak in Gerrit 0.4%
• CVE-2020-8919 Low 3.5 Information leakage in Gerrit 0.3%