GitLab
5 GitLab flaws are on CISA's list of vulnerabilities attackers have used, 3 of them added in 2026. CISA says 1 is known to be used by ransomware. The latest was added Sep 11, 2026.
5on CISA's list, all time
3added in 2026
1in the last 90 days
1used by ransomware
1zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Community and Enterprise Editions | 2 | Feb 3, 2026 |
| Community Edition and Enterprise Edition | 1 | Sep 11, 2026 |
| GitLab | 1 | Feb 18, 2026 |
| GitLab CE/EE | 1 | May 1, 2024 |
Latest GitLab flaws
- Community Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
- GitLabGitLab Server-Side Request Forgery (SSRF) Vulnerability
- Community and Enterprise EditionsGitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
- GitLab CE/EEGitLab Community and Enterprise Editions Improper Access Control Vulnerability
- Community and Enterprise EditionsGitLab Community and Enterprise Editions Remote Code Execution Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.