G
Vendor security profile
Gerrit
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit3
Patch rate%25
Avg. CVSS7.6
12-month vulnerability rate
0
0
0
0
0
0
1
0
0
0
3
0
CVE KEV
CVE severity distribution
4toplam CVE
High3 (75%)
Medium1 (25%)
Patch and exploitation view
%25
Verified patch
%0
CISA KEV
%75
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
8.7
CVE-2026-87722
Regular Expression Denial of Service (ReDoS) in Search Query Predicates and REST Filter Endpoints in Gerrit Code Review
G
Patch status unknownEPSS %0
8.7
CVE-2026-87721
Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review
G
Patch status unknownEPSS %0
7.6
CVE-2026-87720
Incorrect Authorization via Stale ProjectCache Eviction and Repeated .git Suffixes in Gerrit Code Review
G
Patch status unknownEPSS %0