Security Digest
GitLab: known exploited vulnerabilities
4 GitLab CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-09-11 | CVE-2026-85706 | GitLab Community Edition and Enterprise Edition GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability | 2026-09-14 |
| 2026-02-18 | CVE-2021-22175 | GitLab GitLab GitLab Server-Side Request Forgery (SSRF) Vulnerability | 2026-03-11 |
| 2026-02-03 | CVE-2021-39935 | GitLab Community and Enterprise Editions GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability | 2026-02-24 |
| 2024-05-01 | CVE-2023-7028 | GitLab GitLab CE/EE GitLab Community and Enterprise Editions Improper Access Control Vulnerability | 2024-05-22 |