GitLab
5 CVEs in CISA KEV — 1 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2026-85706 |
Community Edition and Enterprise Edition | — | 0.9736 | 2026-09-11 | 2026-09-14 | GitLab Community Edition and Enterprise Edition contains a path traversal vulner | |
CVE-2023-7028 |
GitLab CE/EE | — | 0.9446 | 2024-05-01 | 2024-05-22 | GitLab Community and Enterprise Editions contain an improper access control vuln | |
CVE-2021-22175 |
GitLab | — | — | 2026-02-18 | 2026-03-11 | GitLab contains a server-side request forgery (SSRF) vulnerability when requests | |
CVE-2021-39935 |
Community and Enterprise Editions | — | — | 2026-02-03 | 2026-02-24 | GitLab Community and Enterprise Editions contain a server-side request forgery v | |
CVE-2021-22205 |
Community and Enterprise Editions | — | — | 2021-11-03 | 2021-11-17 | RW | GitHub Community and Enterprise Editions that utilize the ability to upload imag |