GitLab CE / EE security vulnerabilities
DevSecOps. Public CVE monitoring for GitLab CE / EE. Vendor security advisories are linked on this page.
Built for DevOps and platform teams.
564 public records · 0 security-fix timeline events. 10 published in the last 7 days. 171 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 9
- High 18
- Medium 27
- Low 8
2026-08-0462 issues2026-11-01
Known exploited
View all known exploited- Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityPatch nowKEVEPSS 97.36%Sep 11, 2026
- High7.5GitLab GitLab Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 71.64%May 26, 2023
- Critical10.0CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLabPatch nowKEVEPSS 27.30%Oct 12, 2026
- Critical9.1GitLab GitLab Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.15%Aug 17, 2026
- High8.6Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service VulnerabilityPatch nowKEVEPSS 0.82%Oct 28, 2026
Recently published
Browse catalog- High8.6Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service VulnerabilityPatch nowKEVEPSS 0.82%Oct 28, 2026
- Critical9.9Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator.Check if you run itEPSS 0.46%Oct 26, 2026
- HighDistrust compromised intermediate certificates in crypto/x509Check if you run itEPSS 0.40%Oct 19, 2026
- High7.8mise manages dev tools like node, python, cmake, and terraform.Check if you run itEPSS 0.26%Oct 14, 2026
- Medium6.5Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context.Check if you run itEPSS 0.55%Oct 14, 2026
- Critical10.0CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLabPatch nowKEVEPSS 27.30%Oct 12, 2026
- High8.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.48%Oct 12, 2026
- High8.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.34%Oct 12, 2026
- High8.2GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed aCheck if you run itEPSS 0.39%Oct 12, 2026
- Medium6.2GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.16%Oct 12, 2026