GitLab issued emergency patches for a CVSS 10.0 flaw letting attackers run code without logging in, affecting versions back ...

GitLab fixes CVE-2026-110264, a critical flaw that could allow unauthenticated code execution on self-managed versions dating back to 7.0.

GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers.

Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US ...

GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler.

GitLab released urgent patches for a maximum-severity flaw that lets attackers run code on self-managed servers.

If you operate GitLab in-house, there is a vulnerability you should check today: CVE-2026-97229. It is an integer overflow vulnerability in the CI/CD regular expression compiler, fixed in a critical ...

GitLab’s non-expiring incoming email token can let a holder commit code with a user’s permissions and trigger CI/CD jobs.

On October 21, GitLab released an emergency patch. There are seven versions: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, ...

GitLab said it resolved CI/CD failures and slower interface performance affecting a limited number of GitLab.com customers after several days of intermittent platform disruptions.