GitLab issued emergency patches for a CVSS 10.0 flaw letting attackers run code without logging in, affecting versions back ...

Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US ...

GitLab fixes CVE-2026-110264, a critical flaw that could allow unauthenticated code execution on self-managed versions dating back to 7.0.

GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers.

GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler.

GitLab released emergency patches v19.4.2, v19.3.5, and v19.2.8. These apply to both Community Edition (CE) and Enterprise Edition (EE), fixing a total of 24 vulnerabilities. The company strongly reco ...

GitLab released urgent patches for a maximum-severity flaw that lets attackers run code on self-managed servers.

GitLab’s non-expiring incoming email token can let a holder commit code with a user’s permissions and trigger CI/CD jobs.

GitLab said it resolved CI/CD failures and slower interface performance affecting a limited number of GitLab.com customers after several days of intermittent platform disruptions.

A long-lived token embedded in GitLab’s issue-creating email address means anyone with the address, not just the project owner, can push code and trigger CI/CD jobs subject to the account’s existing ...