CVE-2026-22860 vulnerabilities

Vulnerabilities for packages: ruby4.0-rack, ruby3.4-rack, gitlab-cng, ruby3.3-rails, kube-fluentd-operator, ruby3.2-rails, ruby3.4-rails, gitlab-rails-ce, ruby4.0-rails, gitlab-rails-ce-fips, logstash, ruby3.2-rack, ruby3.3-rack...

CVE-2026-25500 vulnerabilities

Vulnerabilities for packages: ruby4.0-rack, ruby3.4-rack, gitlab-cng, ruby3.3-rails, kube-fluentd-operator, ruby3.2-rails, ruby3.4-rails, gitlab-rails-ce, ruby4.0-rails, gitlab-rails-ce-fips, logstash, ruby3.2-rack, ruby3.3-rack...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2021-22175link is external GitLab Server-Side Request Forgery SSRF Vulnerability CVE-2026-22769link is external Dell RecoverPoint for Virtual Machines RP4VMs Us...

GitLab Server-Side Request Forgery (SSRF) Vulnerability

GitLab contains a server-side request forgery SSRF vulnerability when requests to the internal network for webhooks are enabled...

GHSA-8F2F-6W9M-MG42 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-pages-fips, gitlab-rails-ce-fips, gitlab-runner...

CVE-2026-1282 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-pages-fips, gitlab-rails-ce-fips, gitlab-runner...

GHSA-M668-XFWP-34X6 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-runner-fips, gitlab-pages-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips...

GHSA-CF2V-M456-7QJF vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-runner-fips, gitlab-pages-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips...

CVE-2026-1458 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-runner-fips, gitlab-pages-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips...

GHSA-95P8-CCJW-3G7F vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-pages-fips, gitlab-rails-ce-fips, gitlab-runner...

GHSA-W487-9R9P-6P96 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-pages-fips, gitlab-rails-ce-fips, gitlab-runner...

CVE-2026-0595 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-runner-fips, gitlab-pages-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips...

CVE-2026-1456 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-pages-fips, gitlab-rails-ce-fips, gitlab-runner...

CVE-2026-1094 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-pages-fips, gitlab-rails-ce-fips, gitlab-runner...

BIT-GITLAB-2026-1458 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.0 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an unauthenticated user to cause denial of service by uploading malicious files...

BIT-GITLAB-2026-1456 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through CPU exhaustion by submitting specially crafted markdown files that trigger exponential processin...

BIT-GITLAB-2026-1282 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated user to inject malicious content into project labels titles...

BIT-GITLAB-2026-1094 Improper Validation of Unsafe Equivalence in Input in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 18.8.4 that could have allowed an authenticated developer to hide specially crafted file changes from the WebUI...

BIT-GITLAB-2026-0958 Interpretation Conflict in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through memory or CPU exhaustion by bypassing JSON validation middleware limits...

BIT-GITLAB-2026-0595 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to add unauthorized email addresses to victim accounts through HTML injection in test...