GitLab

Products

Exploited and recent CVEs

• CVE-2026-97229 Critical 10.0 Exploited Integer Overflow or Wraparound in GitLab 65.2%
• CVE-2026-85706 Critical 10.0 Exploited Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab 97.4%
• CVE-2023-7028 Critical 10.0 Exploited Weak Password Recovery Mechanism for Forgotten Password in GitLab 94.5%
• CVE-2021-39935 Medium 6.8 Exploited An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unau 36.1%
• CVE-2021-22175 Medium 6.8 Exploited When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthent 53.4%
• CVE-2021-22205 Critical 10.0 Exploited An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote comm 99.7%
• CVE-2026-110264 Critical 10.0 Integer Overflow or Wraparound in GitLab 1.3%
• CVE-2026-12664 Medium 6.8 Incorrect Authorization in GitLab 0.4%
• CVE-2026-13319 Medium 4.3 Authorization Bypass Through User-Controlled Key in GitLab 0.2%
• CVE-2026-14288 Low 3.1 Use of Incorrectly-Resolved Name or Reference in GitLab 0.3%
• CVE-2026-15723 High 8.2 Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab 0.5%
• CVE-2026-16255 Medium 5.9 Incorrect Authorization in GitLab 0.3%
• CVE-2026-103515 Low 2.7 Incorrect Authorization in GitLab 0.2%
• CVE-2026-105711 Low 3.5 Use of Cache Containing Sensitive Information in GitLab 0.2%
• CVE-2026-105777 Medium 4.3 Insertion of Sensitive Information Into Sent Data in GitLab 0.3%
• CVE-2026-112378 Medium 4.3 Use of Less Trusted Source in GitLab 0.1%
• CVE-2026-112212 High 7.5 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab 0.2%
• CVE-2026-112326 Low 3.1 Improper Cleanup on Thrown Exception in GitLab 0.2%
• CVE-2026-5954 Medium 4.2 Incorrect Authorization in GitLab 0.2%
• CVE-2026-6567 Medium 4.3 Incorrect Authorization in GitLab 0.2%
• CVE-2026-7767 Medium 5.8 URL Redirection to Untrusted Site ('Open Redirect') in GitLab 0.3%
• CVE-2026-9268 Low 2.7 Incorrect Authorization in GitLab 0.2%
• CVE-2026-14210 Medium 4.3 Insufficient Granularity of Access Control in GitLab 0.2%
• CVE-2026-14552 Medium 4.3 Incorrect Authorization in GitLab 0.2%
• CVE-2026-14814 High 8.2 Permissive Regular Expression in GitLab 0.4%
• CVE-2026-16275 Medium 5.3 Incorrect Authorization in GitLab 0.3%
• CVE-2026-16301 High 8.5 Incorrect Authorization in GitLab 0.3%
• CVE-2026-78335 Medium 4.2 Incorrect Authorization in GitLab 0.2%
• CVE-2026-81839 High 7.7 Incorrect Authorization in GitLab 0.3%
• CVE-2026-82632 Low 3.1 Incorrect Authorization in GitLab 0.2%