G
Vendor security profile5 actively exploited CVEs
gitlab
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs117
Critical9
CISA KEV5
Public exploit17
Patch rate%2
Avg. CVSS5.9
12-month vulnerability rate
0
1
3
1
1
11
0
0
20
25
28
2
CVE KEV
CVE severity distribution
117toplam CVE
Critical9 (8%)
High28 (24%)
Medium65 (56%)
Low14 (12%)
Uncertain1 (1%)
Patch and exploitation view
%2
Verified patch
%4
CISA KEV
%15
Public exploit
2Patch available
0Partial
5Workaround
0Vendor: no patch
110Unknown
Latest vulnerabilities
6.5
CVE-2026-1403
Allocation of Resources Without Limits or Throttling in GitLab
G
Patch status unknownEPSS %0
9.9
CVE-2026-90970
Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway
G
Patch status unknownEPSS %1
3.7
CVE-2026-4523
Missing Authorization in GitLab
G
Patch status unknownEPSS %0
4.3
CVE-2026-8937
Missing Authorization in GitLab
G
Patch status unknownEPSS %0
4.3
CVE-2026-10518
Incorrect Authorization in GitLab
G
Patch status unknownEPSS %0
8.7
CVE-2026-84739
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
G
Patch status unknownEPSS %0
9.9
CVE-2026-89078
Double Free in GitLab
G
Patch status unknownEPSS %0
4.3
CVE-2026-92530
Use of Less Trusted Source in GitLab
G
Patch status unknownEPSS %0
7.7
CVE-2026-92470
Missing Authorization in GitLab
G
Patch status unknownEPSS %0
4.3
CVE-2026-92529
Incorrect Authorization in GitLab
G
Patch status unknownEPSS %0