CVE-20XX-?
agent?

GitLab CVEs.

Published CVEs affecting GitLab, ranked by exploit odds.

2 CVEs · updated 2026-11-11 18:01 UTC

Reset all
  1. CVE-2026-97229

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.

    Drop everything exploited Memory safety Server GitLab

    10.0 CRITICAL 65% exploit odds Fix listed
  2. CVE-2026-110264

    An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.

    Memory safety Server GitLab

    10.0 CRITICAL 1% exploit odds Fix listed

All CVEs affecting GitLab that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.