GitLab issued emergency patches for a CVSS 10.0 flaw letting attackers run code without logging in, affecting versions back ...

GitLab on Wednesday patched a maximum-severity flaw that could allow unauthenticated attackers to execute arbitrary code on ...

GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler.

GitLab released emergency patches v19.4.2, v19.3.5, and v19.2.8. These apply to both Community Edition (CE) and Enterprise Edition (EE), fixing a total of 24 vulnerabilities. The company strongly reco ...

CISA adds GitLab code execution and Cisco firewall DoS flaws to its KEV catalog, citing exploitation evidence and an Alpine ...

GitLab fixes 12 security vulnerabilities with updates across several release branches, including a critical remote code execution flaw.

GitLab has announced that it is open sourcing its fuzz testing engine Protocol Fuzzer Community Edition. According to GitLab, fuzz testing is the process of “inputting unexpected, malformed, and/or ...

Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks.