en
GitLab is a software company that develops the GitLab DevSecOps platform. The platform supports collaborative planning, source-code management, CI/CD, security testing, compliance workflows, and software delivery in one product environment. GitLab serves organizations and individual contributors through hosted and self-managed deployments, supported by a global open-source community.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/22/2026, GitLab recorded 104 security vulnerabilities in the last 90 days across 2 products, including 37 rated High or above and 1 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, GitLab had the most security vulnerabilities in the GitLab ecosystem, with 101 vulnerabilities—approximately 97.12% of the provider's total vulnerabilities during this period.
CVE-2026-110264Integer Overflow or Wraparound in GitLabCVE-2026-12664Incorrect Authorization in GitLabCVE-2026-13319Authorization Bypass Through User-Controlled Key in GitLabCVE-2026-14288Use of Incorrectly-Resolved Name or Reference in GitLabCVE-2026-15723Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-110264Integer Overflow or Wraparound in GitLab | Exploitation statusActively exploited | FixYes | Affected productGitLab | Published10/22/2026 | SeverityCritical |
CVE-2026-12664Incorrect Authorization in GitLab | Exploitation statusActively exploited | FixYes | Affected productGitLab | Published10/21/2026 | |
CVE-2026-13319Authorization Bypass Through User-Controlled Key in GitLab | Exploitation statusActively exploited | FixYes | Affected productGitLab | Published10/21/2026 | |
CVE-2026-14288Use of Incorrectly-Resolved Name or Reference in GitLab | Exploitation statusActively exploited | FixYes | Affected productGitLab | Published10/21/2026 | |
CVE-2026-15723Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab | Exploitation statusActively exploited | FixYes | Affected productGitLab | Published | |
CVE-2026-16255Incorrect Authorization in GitLab | Exploitation statusActively exploited | FixYes | Affected productGitLab | Published10/21/2026 | |
CVE-2026-103515Incorrect Authorization in GitLab | Exploitation statusActively exploited | FixYes | Affected productGitLab | Published10/21/2026 | |
CVE-2026-105711Use of Cache Containing Sensitive Information in GitLab | Exploitation statusActively exploited | FixYes | Affected productGitLab | Published10/21/2026 | |
CVE-2026-105777Insertion of Sensitive Information Into Sent Data in GitLab | Exploitation statusActively exploited | FixYes | Affected productGitLab | Published10/21/2026 | |
CVE-2026-112378Use of Less Trusted Source in GitLab | Exploitation statusNot confirmed | FixYes | Affected productGitLab | Published10/21/2026 |
1,527 Results | Page 1 of 153
| SeverityMedium |
| SeverityLow |
| SeverityHigh |
| SeverityLow |
| SeverityMedium |
| SeverityMedium |