---
title: "GitLab: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/gitlab/
description: "Every GitLab vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (4), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-09-11
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# GitLab: known exploited vulnerabilities

- 2026-09-11 [CVE-2026-85706](https://erroneo.us/security/cve/CVE-2026-85706/index.md) GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability (due 2026-09-14; ransomware: Unknown)
- 2026-02-18 [CVE-2021-22175](https://erroneo.us/security/cve/CVE-2021-22175/index.md) GitLab GitLab: GitLab Server-Side Request Forgery (SSRF) Vulnerability (due 2026-03-11; ransomware: Unknown)
- 2026-02-03 [CVE-2021-39935](https://erroneo.us/security/cve/CVE-2021-39935/index.md) GitLab Community and Enterprise Editions: GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability (due 2026-02-24; ransomware: Unknown)
- 2024-05-01 [CVE-2023-7028](https://erroneo.us/security/cve/CVE-2023-7028/index.md) GitLab GitLab CE/EE: GitLab Community and Enterprise Editions Improper Access Control Vulnerability (due 2024-05-22; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/gitlab/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt