Exploited vulnerabilities
GitLab
6 GitLab vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue6
Last 12 months4
In ransomware campaigns1
Last addition29 October 2026
The vulnerabilities6
- 29 October 2026CVE-2026-97229Community Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
- 11 September 2026CVE-2026-85706Community Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
- 18 February 2026CVE-2021-22175GitLabGitLab Server-Side Request Forgery (SSRF) Vulnerability
- 3 February 2026CVE-2021-39935Community and Enterprise EditionsGitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
- 1 May 2024CVE-2023-7028GitLab CE/EEGitLab Community and Enterprise Editions Improper Access Control Vulnerability
- 3 November 2021CVE-2021-22205Community and Enterprise EditionsGitLab Community and Enterprise Editions Remote Code Execution VulnerabilityRansomware
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, GitLab included.