InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,498 CVEs published, 356 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,498
Show in the list
Critical, last 7 days
356
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product gitlab:gitlab. Show all products

281 CVEs, showing 201 to 250PreviousPage 5 of 6Next
CVESeverityTitlePublished
CVE-2026-6336Medium 5.3Incorrect Authorization in GitLab
Assigned by GitLab
Jul 29, 2026
CVE-2026-6267High 8.5Insertion of Sensitive Information Into Sent Data in GitLab
Assigned by GitLab
Jul 29, 2026
CVE-2026-4672Medium 4.3Missing Authorization in GitLab
Assigned by GitLab
Jul 29, 2026
CVE-2026-3093Medium 4.7Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
Assigned by GitLab
Jul 29, 2026
CVE-2025-14562Low 3.1Incorrect Authorization in GitLab
Assigned by GitLab
Jul 29, 2026
CVE-2026-18244Medium 4.3Missing Authorization in GitLab
Assigned by GitLab
Aug 12, 2026
CVE-2026-16627High 7.7Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
Assigned by GitLab
Aug 12, 2026
CVE-2026-15423High 8.5Incorrect Authorization in GitLab
Assigned by GitLab
Aug 12, 2026
CVE-2026-8667Medium 4.3Incorrect Authorization in GitLab
Assigned by GitLab
Aug 12, 2026
CVE-2026-7427Medium 5.3Allocation of Resources Without Limits or Throttling in GitLab
Assigned by GitLab
Aug 12, 2026
CVE-2026-19228High 8.5Authorization Bypass Through User-Controlled Key in GitLab
Assigned by GitLab
Aug 12, 2026
CVE-2026-18433Medium 4.3Incorrect Authorization in GitLab
Assigned by GitLab
Aug 12, 2026
CVE-2026-16494High 7.1Missing Authorization in GitLab
Assigned by GitLab
Aug 12, 2026
CVE-2026-15216High 8.7Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
Assigned by GitLab
Aug 12, 2026
CVE-2026-15217High 8.7Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
Assigned by GitLab
Aug 12, 2026
CVE-2026-6821Medium 4.3Missing Authorization in GitLab
Assigned by GitLab
Aug 12, 2026
CVE-2026-4879Medium 4.3Missing Authorization in GitLab
Assigned by GitLab
Aug 12, 2026
CVE-2025-9486Low 3.3Incorrect Privilege Assignment in GitLab
Assigned by GitLab
Aug 12, 2026
CVE-2026-19478Critical 9.4Improper Control of Generation of Code ('Code Injection') in GitLab
Assigned by GitLab
Aug 17, 2026
CVE-2026-19650High 7.1Cross-Site Request Forgery (CSRF) in GitLab
Assigned by GitLab
Aug 17, 2026
CVE-2026-10053High 8.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
Assigned by GitLab
Aug 23, 2026
CVE-2026-77801Medium 6.5Allocation of Resources Without Limits or Throttling in GitLab
Assigned by GitLab
Aug 26, 2026
CVE-2026-18252High 7.3Inclusion of Functionality from Untrusted Control Sphere in GitLab
Assigned by GitLab
Aug 26, 2026
CVE-2026-15387Medium 4.3Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab
Assigned by GitLab
Aug 26, 2026
CVE-2026-7487Low 3.5Access Control Check Implemented After Asset is Accessed in GitLab
Assigned by GitLab
Aug 26, 2026
CVE-2026-3035Medium 5.5Authentication Bypass Using an Alternate Path or Channel in GitLab
Assigned by GitLab
Aug 26, 2026
CVE-2025-10903Medium 6.5Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
Assigned by GitLab
Aug 26, 2026
CVE-2026-75871High 8.2Server-Side Request Forgery (SSRF) in GitLab AI Gateway
Assigned by GitLab
Aug 27, 2026
CVE-2026-87719Critical 9.9Deserialization of Untrusted Data in GitLab
Assigned by GitLab
Sep 12, 2026
CVE-2026-85706
Known exploited
Critical 10.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
Assigned by GitLab
Sep 12, 2026
CVE-2026-88765High 8.5Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
Assigned by GitLab
Sep 15, 2026
CVE-2026-82837Medium 5.3Insertion of Sensitive Information Into Sent Data in GitLab
Assigned by GitLab
Sep 15, 2026
CVE-2026-13210High 7.7Incorrect Authorization in GitLab
Assigned by GitLab
Sep 15, 2026
CVE-2026-12910Medium 5.4Missing Authentication for Critical Function in GitLab
Assigned by GitLab
Sep 15, 2026
CVE-2026-79708High 8.5Incorrect Authorization in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-78252High 8.2Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-19619Medium 4.7Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-16794Medium 4.3Missing Authorization in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-8030Medium 4.3Missing Authorization in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-7514Medium 4.3Missing Authorization in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-3855Low 3.1Improper Control of Resource Identifiers ('Resource Injection') in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-1168High 7.5Allocation of Resources Without Limits or Throttling in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2025-14871High 7.5Allocation of Resources Without Limits or Throttling in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2024-11222Medium 6.4Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-86341Medium 4.4Access Control Check Implemented After Asset is Accessed in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-93577Critical 9.9Integer Overflow or Wraparound in GitLab
Assigned by GitLab
Sep 23, 2026
CVE-2026-92628Low 3.1Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLab
Assigned by GitLab
Sep 23, 2026
CVE-2026-92874Medium 5.4Incorrect Authorization in GitLab
Assigned by GitLab
Sep 23, 2026
CVE-2026-92529Medium 4.3Incorrect Authorization in GitLab
Assigned by GitLab
Sep 23, 2026
CVE-2026-92470High 7.7Missing Authorization in GitLab
Assigned by GitLab
Sep 23, 2026
PreviousPage 5 of 6Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.