GitLab: exploited vulnerabilities
- 5exploited vulnerabilities
- 1used by ransomware
- Sep 11, 2026latest one added
- Community and Enterprise Editions 2
- Community Edition and Enterprise Edition 1
- GitLab 1
- GitLab CE/EE 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 11, 2026 | Path Traversal | Community Edition and Enterprise Edition | Critical 10.0 | 97% |
| Feb 18, 2026 | Server-Side Request Forgery (SSRF) | GitLab | Medium 6.8 | 53% |
| Feb 3, 2026 | Server-Side Request Forgery (SSRF) | Community and Enterprise Editions | Medium 6.8 | 36% |
| May 1, 2024 | Community and Enterprise Editions Improper Access Control | GitLab CE/EE | Critical 10.0 | 94% |
| Nov 3, 2021 | Remote Code Execution | Community and Enterprise Editions | Critical 10.0 | 99.7% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.