Gitlab vulnerabilities

Products

• Gitlab 1,509
• Ce/ee 32
• Community And Enterprise Editions 13
• Ee 11
• Runner 6
• Gitlab-shell 5
• Dynamic Application Security Testing Analyzer 4
• Ai Gateway 4
• Community Edition 3
• Runner 3
• Community And Enterprise Editions 2
• Community Edition And Enterprise Edition 2
• Dast 2
• Enterprise Edition 2
• Gitlab-vscode-extension 2

Newest

• gitlab Integer Overflow or Wraparound in GitLab CVE-2026-110264 Public exploitFix available 10.0 CriticalOctober 22, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-12664 Fix available 6.8 MediumOctober 21, 2026
• gitlab Authorization Bypass Through User-Controlled Key in GitLab CVE-2026-13319 Fix available 4.3 MediumOctober 21, 2026
• gitlab Use of Incorrectly-Resolved Name or Reference in GitLab CVE-2026-14288 Fix available 3.1 LowOctober 21, 2026
• gitlab Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab CVE-2026-15723 Fix available 8.2 HighOctober 21, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-16255 Fix available 5.9 MediumOctober 21, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-103515 Fix available 2.7 LowOctober 21, 2026
• gitlab Use of Cache Containing Sensitive Information in GitLab CVE-2026-105711 Fix available 3.5 LowOctober 21, 2026
• gitlab Insertion of Sensitive Information Into Sent Data in GitLab CVE-2026-105777 Fix available 4.3 MediumOctober 21, 2026
• gitlab Use of Less Trusted Source in GitLab CVE-2026-112378 Fix available 4.3 MediumOctober 21, 2026
• gitlab Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab CVE-2026-112212 Fix available 7.5 HighOctober 21, 2026
• gitlab Improper Cleanup on Thrown Exception in GitLab CVE-2026-112326 Fix available 3.1 LowOctober 21, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-5954 Fix available 4.2 MediumOctober 13, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-6567 Fix available 4.3 MediumOctober 13, 2026
• gitlab URL Redirection to Untrusted Site ('Open Redirect') in GitLab CVE-2026-7767 Fix available 5.8 MediumOctober 13, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-9268 Fix available 2.7 LowOctober 13, 2026
• gitlab Insufficient Granularity of Access Control in GitLab CVE-2026-14210 Fix available 4.3 MediumOctober 13, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-14552 Fix available 4.3 MediumOctober 13, 2026
• gitlab Permissive Regular Expression in GitLab CVE-2026-14814 Fix available 8.2 HighOctober 13, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-16275 Fix available 5.3 MediumOctober 13, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-16301 Fix available 8.5 HighOctober 13, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-78335 Fix available 4.2 MediumOctober 13, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-81839 Fix available 7.7 HighOctober 13, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-82632 Fix available 3.1 LowOctober 13, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-84284 Fix available 5.3 MediumOctober 13, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-85529 Fix available 5.3 MediumOctober 13, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-92528 Fix available 4.2 MediumOctober 13, 2026
• gitlab Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CVE-2026-92883 Fix available 8.7 HighOctober 13, 2026
• gitlab, gitlab community edition and enterprise edition, ruby-lang ruby +2 more Integer Overflow or Wraparound in GitLab CVE-2026-97229 In KEVPublic exploitFix available EPSS 27.3% 10.0 CriticalOctober 13, 2026
• gitlab Improper Neutralization of Input Used for LLM Prompting in GitLab CVE-2026-96893 Fix available 7.3 HighOctober 13, 2026
• gitlab Server-Side Request Forgery (SSRF) in GitLab CVE-2026-100104 Fix available 3.5 LowOctober 13, 2026
• gitlab Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab CVE-2026-100755 Fix available 4.6 MediumOctober 13, 2026
• gitlab Insertion of Sensitive Information into Log File in GitLab CVE-2026-101168 Fix available 6.2 MediumOctober 13, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-103549 Fix available 2.7 LowOctober 13, 2026
• gitlab Incorrect Privilege Assignment in GitLab CVE-2026-104661 Fix available 4.3 MediumOctober 13, 2026
• gitlab Reliance on Untrusted Inputs in a Security Decision in GitLab CVE-2026-105458 Fix available 4.3 MediumOctober 13, 2026
• gitlab Allocation of Resources Without Limits or Throttling in GitLab CVE-2026-1403 Fix available 6.5 MediumOctober 7, 2026
• gitlab ai gateway Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway CVE-2026-90970 Public exploit EPSS 17.5% 9.9 CriticalOctober 2, 2026
• gitlab Missing Authorization in GitLab CVE-2026-4523 Fix available 3.7 LowSeptember 29, 2026
• gitlab Missing Authorization in GitLab CVE-2026-8937 Fix available 4.3 MediumSeptember 29, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-10518 Fix available 4.3 MediumSeptember 29, 2026
• gitlab Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CVE-2026-84739 Fix available 8.7 HighSeptember 29, 2026
• gitlab Double Free in GitLab CVE-2026-89078 Fix available 9.9 CriticalSeptember 23, 2026
• gitlab Use of Less Trusted Source in GitLab CVE-2026-92530 Fix available 4.3 MediumSeptember 23, 2026
• gitlab Missing Authorization in GitLab CVE-2026-92470 Fix available 7.7 HighSeptember 23, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-92529 Fix available 4.3 MediumSeptember 23, 2026
• gitlab Incorrect Authorization in GitLab CVE-2026-92874 Fix available 5.4 MediumSeptember 23, 2026
• gitlab Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLab CVE-2026-92628 Fix available 3.1 LowSeptember 23, 2026
• gitlab Integer Overflow or Wraparound in GitLab CVE-2026-93577 Fix available 9.9 CriticalSeptember 23, 2026
• gitlab Access Control Check Implemented After Asset is Accessed in GitLab CVE-2026-86341 Fix available 4.4 MediumSeptember 16, 2026
• Show olderLoading…