InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,438 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,438
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product gitlab:gitlab. Show all products

281 CVEs, showing 1 to 50Page 1 of 6Next
CVESeverityTitlePublished
CVE-2026-5954Medium 4.2Incorrect Authorization in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-6567Medium 4.3Incorrect Authorization in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-7767Medium 5.8URL Redirection to Untrusted Site ('Open Redirect') in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-9268Low 2.7Incorrect Authorization in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-14210Medium 4.3Insufficient Granularity of Access Control in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-14552Medium 4.3Incorrect Authorization in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-14814High 8.2Permissive Regular Expression in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-16275Medium 5.3Incorrect Authorization in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-16301High 8.5Incorrect Authorization in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-78335Medium 4.2Incorrect Authorization in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-81839High 7.7Incorrect Authorization in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-82632Low 3.1Incorrect Authorization in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-84284Medium 5.3Incorrect Authorization in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-85529Medium 5.3Incorrect Authorization in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-92528Medium 4.2Incorrect Authorization in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-92883High 8.7Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-97229Critical 10.0Integer Overflow or Wraparound in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-96893High 7.3Improper Neutralization of Input Used for LLM Prompting in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-100104Low 3.5Server-Side Request Forgery (SSRF) in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-100755Medium 4.6Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-101168Medium 6.2Insertion of Sensitive Information into Log File in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-103549Low 2.7Incorrect Authorization in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-104661Medium 4.3Incorrect Privilege Assignment in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-105458Medium 4.3Reliance on Untrusted Inputs in a Security Decision in GitLab
Assigned by GitLab
Oct 13, 2026
CVE-2026-1403Medium 6.5Allocation of Resources Without Limits or Throttling in GitLab
Assigned by GitLab
Oct 7, 2026
CVE-2026-4523Low 3.7Missing Authorization in GitLab
Assigned by GitLab
Sep 29, 2026
CVE-2026-8937Medium 4.3Missing Authorization in GitLab
Assigned by GitLab
Sep 29, 2026
CVE-2026-10518Medium 4.3Incorrect Authorization in GitLab
Assigned by GitLab
Sep 29, 2026
CVE-2026-84739High 8.7Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
Assigned by GitLab
Sep 29, 2026
CVE-2026-89078Critical 9.9Double Free in GitLab
Assigned by GitLab
Sep 23, 2026
CVE-2026-92530Medium 4.3Use of Less Trusted Source in GitLab
Assigned by GitLab
Sep 23, 2026
CVE-2026-92470High 7.7Missing Authorization in GitLab
Assigned by GitLab
Sep 23, 2026
CVE-2026-92529Medium 4.3Incorrect Authorization in GitLab
Assigned by GitLab
Sep 23, 2026
CVE-2026-92874Medium 5.4Incorrect Authorization in GitLab
Assigned by GitLab
Sep 23, 2026
CVE-2026-92628Low 3.1Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLab
Assigned by GitLab
Sep 23, 2026
CVE-2026-93577Critical 9.9Integer Overflow or Wraparound in GitLab
Assigned by GitLab
Sep 23, 2026
CVE-2026-86341Medium 4.4Access Control Check Implemented After Asset is Accessed in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2024-11222Medium 6.4Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2025-14871High 7.5Allocation of Resources Without Limits or Throttling in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-1168High 7.5Allocation of Resources Without Limits or Throttling in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-3855Low 3.1Improper Control of Resource Identifiers ('Resource Injection') in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-7514Medium 4.3Missing Authorization in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-8030Medium 4.3Missing Authorization in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-16794Medium 4.3Missing Authorization in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-19619Medium 4.7Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-78252High 8.2Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-79708High 8.5Incorrect Authorization in GitLab
Assigned by GitLab
Sep 16, 2026
CVE-2026-12910Medium 5.4Missing Authentication for Critical Function in GitLab
Assigned by GitLab
Sep 15, 2026
CVE-2026-13210High 7.7Incorrect Authorization in GitLab
Assigned by GitLab
Sep 15, 2026
CVE-2026-82837Medium 5.3Insertion of Sensitive Information Into Sent Data in GitLab
Assigned by GitLab
Sep 15, 2026
Page 1 of 6Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.