CVEs for GitLab
680 matching vulnerabilities, 6 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-110264 Integer Overflow or Wraparound in GitLab
CVSS 10.0 criticalEPSS 1.0%GitLab1 incident
CVE-2026-12664 Incorrect Authorization in GitLab
CVSS 6.8 mediumEPSS 0.33%GitLab
CVE-2026-13319 Authorization Bypass Through User-Controlled Key in GitLab
CVSS 4.3 mediumEPSS 0.22%GitLab
CVE-2026-14288 Use of Incorrectly-Resolved Name or Reference in GitLab
CVSS 3.1 lowEPSS 0.24%GitLab
CVE-2026-16255 Incorrect Authorization in GitLab
CVSS 5.9 mediumEPSS 0.21%GitLab
CVE-2026-103515 Incorrect Authorization in GitLab
CVSS 2.7 lowEPSS 0.23%GitLab
CVE-2026-105711 Use of Cache Containing Sensitive Information in GitLab
CVSS 3.5 lowEPSS 0.21%GitLab
CVE-2026-105777 Insertion of Sensitive Information Into Sent Data in GitLab
CVSS 4.3 mediumEPSS 0.25%GitLab
CVE-2026-112378 Use of Less Trusted Source in GitLab
CVSS 4.3 mediumEPSS 0.12%GitLab
CVE-2026-112326 Improper Cleanup on Thrown Exception in GitLab
CVSS 3.1 lowEPSS 0.18%GitLab
CVE-2026-5954 Incorrect Authorization in GitLab
CVSS 4.2 mediumEPSS 0.19%GitLab
CVE-2026-6567 Incorrect Authorization in GitLab
CVSS 4.3 mediumEPSS 0.22%GitLab
CVE-2026-7767 URL Redirection to Untrusted Site ('Open Redirect') in GitLab
CVSS 5.8 mediumEPSS 0.29%GitLab
CVE-2026-9268 Incorrect Authorization in GitLab
CVSS 2.7 lowEPSS 0.18%GitLab
CVE-2026-14210 Insufficient Granularity of Access Control in GitLab
CVSS 4.3 mediumEPSS 0.22%GitLab
CVE-2026-14552 Incorrect Authorization in GitLab
CVSS 4.3 mediumEPSS 0.19%GitLab
CVE-2026-14814 Permissive Regular Expression in GitLab
CVSS 8.2 highEPSS 0.39%GitLab
CVE-2026-16275 Incorrect Authorization in GitLab
CVSS 5.3 mediumEPSS 0.26%GitLab
CVE-2026-16301 Incorrect Authorization in GitLab
CVSS 8.5 highEPSS 0.33%GitLab
CVE-2026-78335 Incorrect Authorization in GitLab
CVSS 4.2 mediumEPSS 0.19%GitLab
CVE-2026-81839 Incorrect Authorization in GitLab
CVSS 7.7 highEPSS 0.28%GitLab
CVE-2026-82632 Incorrect Authorization in GitLab
CVSS 3.1 lowEPSS 0.21%GitLab
CVE-2026-84284 Incorrect Authorization in GitLab
CVSS 5.3 mediumEPSS 0.22%GitLab
CVE-2026-85529 Incorrect Authorization in GitLab
CVSS 5.3 mediumEPSS 0.22%GitLab
CVE-2026-92528 Incorrect Authorization in GitLab
CVSS 4.2 mediumEPSS 0.13%GitLab
CVE-2026-97229 Integer Overflow or Wraparound in GitLab
CVSS 10.0 criticalEPSS 18.4%GitLab1 incident
CVE-2026-96893 Improper Neutralization of Input Used for LLM Prompting in GitLab
CVSS 7.3 highEPSS 0.58%GitLab
CVE-2026-100104 Server-Side Request Forgery (SSRF) in GitLab
CVSS 3.5 lowEPSS 0.20%GitLab
CVE-2026-100755 Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab
CVSS 4.6 mediumEPSS 0.09%GitLab
CVE-2026-101168 Insertion of Sensitive Information into Log File in GitLab
CVSS 6.2 mediumEPSS 0.16%GitLab
CVE-2026-103549 Incorrect Authorization in GitLab
CVSS 2.7 lowEPSS 0.23%GitLab
CVE-2026-104661 Incorrect Privilege Assignment in GitLab
CVSS 4.3 mediumEPSS 0.18%GitLab
CVE-2026-105458 Reliance on Untrusted Inputs in a Security Decision in GitLab
CVSS 4.3 mediumEPSS 0.19%GitLab
CVE-2026-1403 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.33%GitLab
CVE-2026-90970 Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway
CVSS 9.9 criticalEPSS 17.5%GitLab
CVE-2026-4523 Missing Authorization in GitLab
CVSS 3.7 lowEPSS 0.26%GitLab
CVE-2026-8937 Missing Authorization in GitLab
CVSS 4.3 mediumEPSS 0.23%GitLab
CVE-2026-10518 Incorrect Authorization in GitLab
CVSS 4.3 mediumEPSS 0.23%GitLab
CVE-2026-89078 Double Free in GitLab
CVSS 9.9 criticalEPSS 0.49%GitLab1 incident
CVE-2026-92530 Use of Less Trusted Source in GitLab
CVSS 4.3 mediumEPSS 0.11%GitLab
CVE-2026-92470 Missing Authorization in GitLab
CVSS 7.7 highEPSS 0.21%GitLab
CVE-2026-92529 Incorrect Authorization in GitLab
CVSS 4.3 mediumEPSS 0.18%GitLab
CVE-2026-92874 Incorrect Authorization in GitLab
CVSS 5.4 mediumEPSS 0.15%GitLab
CVE-2026-93577 Integer Overflow or Wraparound in GitLab
CVSS 9.9 criticalEPSS 0.59%GitLab1 incident
CVE-2026-86341 Access Control Check Implemented After Asset is Accessed in GitLab
CVSS 4.4 mediumEPSS 0.36%GitLab
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)