CyberSecBulletin

GitLab vulnerabilities

We track 242 vulnerabilities in GitLab products across 4 products. 242 are rated high or critical, and 6 have been exploited in real attacks. The most recent was published on October 22, 2026.

242vulnerabilities
31critical
211high
6exploited
8.1average CVSS score

Latest GitLab vulnerabilities

  • 9.8 Critical severity

    GitLab Server-Side Request Forgery (SSRF) Exploited

    CVE-2021-22175GitLabEPSS 53.4%

    When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration

  • 10.0 Critical severity

    GitLab Community and Enterprise Editions Remote Code Execution Exploited

    CVE-2021-22205GitLabEPSS 99.7%

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.