Products
DevOps, CI/CD & developer tools
GitLab
- Last 30 days
- 36
- Actively exploited (KEV)
- 6
- All CVEs
- 1,163
Patch these first
Patch todayLatest vulnerabilities
| ID | Severity | Description | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-110264 | 10.0Critical |
GitLab GitLab
Integer Overflow or Wraparound in GitLab
|
1.34% |
2026-10-22
19 d ago
|
| CVE-2026-12664 | 6.8Medium |
GitLab GitLab
Incorrect Authorization in GitLab
|
0.39% |
2026-10-22
19 d ago
|
| CVE-2026-13319 | 4.3Medium |
GitLab GitLab
Authorization Bypass Through User-Controlled Key in GitLab
|
0.23% |
2026-10-22
19 d ago
|
| CVE-2026-14288 | 3.1Low |
GitLab GitLab
Use of Incorrectly-Resolved Name or Reference in GitLab
|
0.26% |
2026-10-22
19 d ago
|
| CVE-2026-15723 | 8.2High |
GitLab GitLab
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
|
0.54% |
2026-10-22
19 d ago
|
| CVE-2026-16255 | 5.9Medium |
GitLab GitLab
Incorrect Authorization in GitLab
|
0.26% |
2026-10-22
19 d ago
|
| CVE-2026-103515 | 2.7Low |
GitLab GitLab
Incorrect Authorization in GitLab
|
0.23% |
2026-10-22
19 d ago
|
| CVE-2026-105711 | 3.5Low |
GitLab GitLab
Use of Cache Containing Sensitive Information in GitLab
|
0.21% |
2026-10-22
19 d ago
|
| CVE-2026-105777 | 4.3Medium |
GitLab GitLab
Insertion of Sensitive Information Into Sent Data in GitLab
|
0.27% |
2026-10-22
19 d ago
|
| CVE-2026-112378 | 4.3Medium |
GitLab GitLab
Use of Less Trusted Source in GitLab
|
0.12% |
2026-10-22
19 d ago
|
| CVE-2026-112212 | 7.5High |
GitLab GitLab
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab
|
0.19% |
2026-10-22
19 d ago
|
| CVE-2026-112326 | 3.1Low |
GitLab GitLab
Improper Cleanup on Thrown Exception in GitLab
|
0.19% |
2026-10-22
19 d ago
|
| CVE-2026-5954 | 4.2Medium |
GitLab GitLab
Incorrect Authorization in GitLab
|
0.19% |
2026-10-13
28 d ago
|
| CVE-2026-6567 | 4.3Medium |
GitLab GitLab
Incorrect Authorization in GitLab
|
0.21% |
2026-10-13
28 d ago
|
| CVE-2026-7767 | 5.8Medium |
GitLab GitLab
URL Redirection to Untrusted Site ('Open Redirect') in GitLab
|
0.29% |
2026-10-13
28 d ago
|
| CVE-2026-9268 | 2.7Low |
GitLab GitLab
Incorrect Authorization in GitLab
|
0.18% |
2026-10-13
28 d ago
|
| CVE-2026-14210 | 4.3Medium |
GitLab GitLab
Insufficient Granularity of Access Control in GitLab
|
0.21% |
2026-10-13
28 d ago
|
| CVE-2026-14552 | 4.3Medium |
GitLab GitLab
Incorrect Authorization in GitLab
|
0.21% |
2026-10-13
28 d ago
|
| CVE-2026-14814 | 8.2High |
GitLab GitLab
Permissive Regular Expression in GitLab
|
0.38% |
2026-10-13
28 d ago
|
| CVE-2026-16275 | 5.3Medium |
GitLab GitLab
Incorrect Authorization in GitLab
|
0.26% |
2026-10-13
28 d ago
|
| CVE-2026-16301 | 8.5High |
GitLab GitLab
Incorrect Authorization in GitLab
|
0.33% |
2026-10-13
28 d ago
|
| CVE-2026-78335 | 4.2Medium |
GitLab GitLab
Incorrect Authorization in GitLab
|
0.19% |
2026-10-13
28 d ago
|
| CVE-2026-81839 | 7.7High |
GitLab GitLab
Incorrect Authorization in GitLab
|
0.27% |
2026-10-13
28 d ago
|
| CVE-2026-82632 | 3.1Low |
GitLab GitLab
Incorrect Authorization in GitLab
|
0.21% |
2026-10-13
28 d ago
|
| CVE-2026-84284 | 5.3Medium |
GitLab GitLab
Incorrect Authorization in GitLab
|
0.26% |
2026-10-13
28 d ago
|
| CVE-2026-85529 | 5.3Medium |
GitLab GitLab
Incorrect Authorization in GitLab
|
0.22% |
2026-10-13
28 d ago
|
| CVE-2026-92528 | 4.2Medium |
GitLab GitLab
Incorrect Authorization in GitLab
|
0.13% |
2026-10-13
28 d ago
|
| CVE-2026-92883 | 8.7High |
GitLab GitLab
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
|
0.47% |
2026-10-13
28 d ago
|
|
CVE-2026-97229
KEV
|
10.0Critical |
GitLab GitLab
Integer Overflow or Wraparound in GitLab
|
65.22% |
2026-10-13
28 d ago
|
| CVE-2026-96893 | 7.3High |
GitLab GitLab
Improper Neutralization of Input Used for LLM Prompting in GitLab
|
0.58% |
2026-10-13
28 d ago
|