pwned.coffeeUpdated 31 min ago

The menu

GitLab

Operational

Nothing about GitLab is on fire right now. We'd tell you. Probably.

3 spills in 2026 for GitLab

Each square is a day. Tap one to see what spilled. Heat = critical 4, high 3, medium 2, low 1, update half.

Past orders

  1. highpatchedexploited GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API. Added to CISA KEV on 2026-09-11 (federal deadline 2026-09-14). CVE-2026-857062 sources
  2. highpatchedexploited GitLab Server-Side Request Forgery (SSRF) Vulnerability GitLab GitLab GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal network for webhooks are enabled. Added to CISA KEV on 2026-02-18 (federal deadline 2026-03-11). CVE-2021-221752 sources
  3. highpatchedexploited GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users to perform Server Side Requests via the CI Lint API. Added to CISA KEV on 2026-02-03 (federal deadline 2026-02-24). CVE-2021-399352 sources

More in Servers

Follow GitLab

RSS: /feed.xml?stack=gitlab. JSON: /incidents.json?stack=gitlab. Or add it to your usual for delivery.