GI
Vendor
GitLab
1,530
CVEs
5
On KEV
42
New 30D
Products
GI10.0
GitLab
DevOps
1,508 CVEs5 on KEV41 new
GA9.9
GitLab AI Gateway
GitLab
3 CVEs0 on KEV1 new
GI8.8
Gitlab-shell
Gitlab
5 CVEs0 on KEV0 new
DA6.5
Dynamic Application Security Testing Analyzer
Gitlab
4 CVEs0 on KEV0 new
RU8.8
Runner
Gitlab
3 CVEs0 on KEV0 new
GI8.6
Gitlab-vscode-extension
Gitlab
2 CVEs0 on KEV0 new
DA6.5
Dast Api Scanner
Gitlab
1 CVEs0 on KEV0 new
GI3.2
Gitaly
Gitlab
1 CVEs0 on KEV0 new
GR7.5
Gitlab Runner
Gitlab
1 CVEs0 on KEV0 new
LS9.8
Language Server
Gitlab
1 CVEs0 on KEV0 new
OM9.8
Omnibus
Gitlab
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110264 New | GI GitLab GitLab | 10.0 | Oct 22 | Integer Overflow or Wraparound in GitLab |
| CVE-2026-12664 New | GI GitLab GitLab | 6.8 | Oct 21 | Incorrect Authorization in GitLab |
| CVE-2026-13319 New | GI GitLab GitLab | 6.5 | Oct 21 | Authorization Bypass Through User-Controlled Key in GitLab |
| CVE-2026-14288 New | GI GitLab GitLab | 3.1 | Oct 21 | Use of Incorrectly-Resolved Name or Reference in GitLab |
| CVE-2026-15723 New | GI GitLab GitLab | 8.2 | Oct 21 | Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab |
| CVE-2026-16255 New | GI GitLab GitLab | 5.9 | Oct 21 | Incorrect Authorization in GitLab |
| CVE-2026-103515 New | GI GitLab GitLab | 2.7 | Oct 21 | Incorrect Authorization in GitLab |
| CVE-2026-105711 New | GI GitLab GitLab | 3.5 | Oct 21 | Use of Cache Containing Sensitive Information in GitLab |
| CVE-2026-105777 New | GI GitLab GitLab | 6.5 | Oct 21 | Insertion of Sensitive Information Into Sent Data in GitLab |
| CVE-2026-112378 New | GI GitLab GitLab | 4.3 | Oct 21 | Use of Less Trusted Source in GitLab |
| CVE-2026-112212 New | GI GitLab GitLab | 7.5 | Oct 21 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab |
| CVE-2026-112326 New | GI GitLab GitLab | 3.1 | Oct 21 | Improper Cleanup on Thrown Exception in GitLab |
| CVE-2026-5954 | GI GitLab GitLab | 4.2 | Oct 13 | Incorrect Authorization in GitLab |
| CVE-2026-6567 | GI GitLab GitLab | 4.3 | Oct 13 | Incorrect Authorization in GitLab |
| CVE-2026-7767 | GI GitLab GitLab | 5.8 | Oct 13 | URL Redirection to Untrusted Site ('Open Redirect') in GitLab |
| CVE-2026-9268 | GI GitLab GitLab | 4.3 | Oct 13 | Incorrect Authorization in GitLab |
| CVE-2026-14210 | GI GitLab GitLab | 4.3 | Oct 13 | Insufficient Granularity of Access Control in GitLab |
| CVE-2026-14552 | GI GitLab GitLab | 4.3 | Oct 13 | Incorrect Authorization in GitLab |
| CVE-2026-14814 | GI GitLab GitLab | 8.2 | Oct 13 | Permissive Regular Expression in GitLab |
| CVE-2026-16275 | GI GitLab GitLab | 5.3 | Oct 13 | Incorrect Authorization in GitLab |
| CVE-2026-16301 | GI GitLab GitLab | 8.5 | Oct 13 | Incorrect Authorization in GitLab |
| CVE-2026-78335 | GI GitLab GitLab | 4.2 | Oct 13 | Incorrect Authorization in GitLab |
| CVE-2026-81839 | GI GitLab GitLab | 7.7 | Oct 13 | Incorrect Authorization in GitLab |
| CVE-2026-82632 | GI GitLab GitLab | 3.1 | Oct 13 | Incorrect Authorization in GitLab |
| CVE-2026-84284 | GI GitLab GitLab | 5.3 | Oct 13 | Incorrect Authorization in GitLab |
| CVE-2026-85529 | GI GitLab GitLab | 5.3 | Oct 13 | Incorrect Authorization in GitLab |
| CVE-2026-92528 | GI GitLab GitLab | 4.2 | Oct 13 | Incorrect Authorization in GitLab |
| CVE-2026-92883 | GI GitLab GitLab | 8.7 | Oct 13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab |
| CVE-2026-97229 | GI GitLab GitLab | 10.0 | Oct 13 | Integer Overflow or Wraparound in GitLab |
| CVE-2026-96893 | GI GitLab GitLab | 7.3 | Oct 13 | Improper Neutralization of Input Used for LLM Prompting in GitLab |
| CVE-2026-100104 | GI GitLab GitLab | 3.5 | Oct 13 | Server-Side Request Forgery (SSRF) in GitLab |
| CVE-2026-100755 | GI GitLab GitLab | 4.6 | Oct 13 | Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab |
| CVE-2026-101168 | GI GitLab GitLab | 6.2 | Oct 13 | Insertion of Sensitive Information into Log File in GitLab |
| CVE-2026-103549 | GI GitLab GitLab | 2.7 | Oct 13 | Incorrect Authorization in GitLab |
| CVE-2026-104661 | GI GitLab GitLab | 4.3 | Oct 13 | Incorrect Privilege Assignment in GitLab |
| CVE-2026-105458 | GI GitLab GitLab | 4.3 | Oct 13 | Reliance on Untrusted Inputs in a Security Decision in GitLab |
| CVE-2026-1403 | GI GitLab GitLab | 6.5 | Oct 7 | Allocation of Resources Without Limits or Throttling in GitLab |
| CVE-2026-90970 | GA GitLab AI Gateway GitLab | 9.9 | Oct 2 | Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway |
| CVE-2026-4523 | GI GitLab GitLab | 3.7 | Sep 29 | Missing Authorization in GitLab |
| CVE-2026-8937 | GI GitLab GitLab | 4.3 | Sep 29 | Missing Authorization in GitLab |
| CVE-2026-10518 | GI GitLab GitLab | 4.3 | Sep 29 | Incorrect Authorization in GitLab |
| CVE-2026-84739 | GI GitLab GitLab | 8.7 | Sep 29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab |
| CVE-2026-89078 | GI GitLab GitLab | 9.9 | Sep 23 | Double Free in GitLab |
| CVE-2026-92530 | GI GitLab GitLab | 4.3 | Sep 23 | Use of Less Trusted Source in GitLab |
| CVE-2026-92470 | GI GitLab GitLab | 7.7 | Sep 23 | Missing Authorization in GitLab |
| CVE-2026-92529 | GI GitLab GitLab | 4.3 | Sep 23 | Incorrect Authorization in GitLab |
| CVE-2026-92874 | GI GitLab GitLab | 5.4 | Sep 23 | Incorrect Authorization in GitLab |
| CVE-2026-92628 | GI GitLab GitLab | 3.1 | Sep 23 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLab |
| CVE-2026-93577 | GI GitLab GitLab | 9.9 | Sep 23 | Integer Overflow or Wraparound in GitLab |
| CVE-2026-86341 | GI GitLab GitLab | 4.4 | Sep 16 | Access Control Check Implemented After Asset is Accessed in GitLab |
| CVE-2024-11222 | GI GitLab GitLab | 6.4 | Sep 16 | Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab |
| CVE-2025-14871 | GI GitLab GitLab | 7.5 | Sep 16 | Allocation of Resources Without Limits or Throttling in GitLab |
| CVE-2026-1168 | GI GitLab GitLab | 7.5 | Sep 16 | Allocation of Resources Without Limits or Throttling in GitLab |
| CVE-2026-3855 | GI GitLab GitLab | 6.8 | Sep 16 | Improper Control of Resource Identifiers ('Resource Injection') in GitLab |
| CVE-2026-7514 | GI GitLab GitLab | 4.3 | Sep 16 | Missing Authorization in GitLab |
| CVE-2026-8030 | GI GitLab GitLab | 4.3 | Sep 16 | Missing Authorization in GitLab |
| CVE-2026-16794 | GI GitLab GitLab | 4.3 | Sep 16 | Missing Authorization in GitLab |
| CVE-2026-19619 | GI GitLab GitLab | 4.7 | Sep 16 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab |
| CVE-2026-78252 | GI GitLab GitLab | 6.1 | Sep 16 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab |
| CVE-2026-79708 | GI GitLab GitLab | 8.5 | Sep 16 | Incorrect Authorization in GitLab |