Patchfirst
Patchfirst

Vendor

GitLab

6 of 29 GitLab CVEs in Patchfirst (21%) are in of vulnerabilities exploited in the wild, 1 of them used by ransomware.

CVEs
29
In CISA KEV
621%
Known ransomware use
1
Median days to KEV
194
from publication
Latest KEV listing
29 Oct 2026
Watch GitLab Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • Community and Enterprise Editions In KEV: 2 CVEs: 2
  • Community Edition and Enterprise Edition In KEV: 2 CVEs: 2
  • GitLab In KEV: 1 CVEs: 23
  • GitLab CE/EE In KEV: 1 CVEs: 1
  • GitLab AI Gateway In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with GitLab CVEs
Open in ATT&CK Navigator

Counts are GitLab CVEs linked to the technique. Each link’s provenance is on the CVE page.

GitLab CVEs

29 CVEs, by priority
  1. CVE-2026-85706GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
    GitLab · Community Edition and Enterprise EditionKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1005Data from Local System
    97.4%Top 0.1%
    80.0priority
  2. CVE-2021-22205GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
    GitLab · Community and Enterprise EditionsKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+2 more
    99.7%Top 0.05%
    80.0priority
  3. CVE-2026-97229GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
    GitLab · Community Edition and Enterprise EditionKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    26.6%Top 2%
    79.5priority
  4. CVE-2023-2825An issue has been discovered in GitLab CE/EE affecting only version 16.0.0
    GitLab · GitLabPublic exploitCritical · 10.0
    71.6%Top 0.58%
    79.2priority
  5. CVE-2026-19478Improper Control of Generation of Code ('Code Injection') in GitLab
    GitLab · GitLabPublic exploitCritical · 9.4
    2.2%Top 18%
    75.1priority
  6. CVE-2023-7028GitLab Community and Enterprise Editions Improper Access Control Vulnerability
    GitLab · GitLab CE/EEKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    94.5%Top 0.15%
    69.8priority
  7. CVE-2021-22175GitLab Server-Side Request Forgery (SSRF) Vulnerability
    GitLab · GitLabKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1090Proxy
    53.4%Top 1%
    69.7priority
  8. CVE-2021-4191An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2
    GitLab · GitLabPublic exploitMedium · 5.3
    80.0%Top 0.39%
    65.0priority
  9. CVE-2021-22214When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab…
    GitLab · GitLabPublic exploitMedium · 6.8
    27.8%Top 1.9%
    64.4priority
  10. CVE-2021-39935GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
    GitLab · Community and Enterprise EditionsKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1046Network Service Discovery
    36.1%Top 1.5%
    62.9priority
  11. CVE-2022-3573An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions…
    GitLab · GitLabMedium · 5.4
    0.6%Top 51%
    49.7priority
  12. CVE-2026-90970GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from…
    GitLab · GitLab AI GatewayPublic exploitCritical · 9.9
    17.5%Top 2.9%
    33.7priority
  13. CVE-2022-1162A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab…
    GitLab · GitLabPublic exploitCritical · 9.1
    75.6%Top 0.48%
    32.4priority
  14. CVE-2022-2992A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2…
    GitLab · GitLabPublic exploitCritical · 9.9
    86.2%Top 0.27%
    31.9priority
  15. CVE-2022-2884A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to…
    GitLab · GitLabPublic exploitCritical · 9.9
    75.7%Top 0.48%
    31.8priority
  16. CVE-2022-2185A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior…
    GitLab · GitLabPublic exploitCritical · 9.9
    76.6%Top 0.46%
    31.8priority
  17. CVE-2022-1175Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8…
    GitLab · GitLabPublic exploitHigh · 8.7
    82.0%Top 0.35%
    31.7priority
  18. CVE-2023-2164Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
    GitLab · GitLabPublic exploitMedium · 5.4
    66.3%Top 0.72%
    28.6priority
  19. CVE-2026-110264An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10…
    GitLab · GitLabPublic exploitCritical · 10.0
    1.3%Top 29%
    28.0priority
  20. CVE-2022-1190Improper handling of user input in GitLab CE/EE versions 8.3 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to…
    GitLab · GitLabHigh · 8.7
    87.9%Top 0.24%
    26.7priority
  21. CVE-2023-2442An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 before 15.11.7, all versions…
    GitLab · GitLabHigh · 8.7
    96.1%Top 0.12%
    26.1priority
  22. CVE-2023-0050An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting…
    GitLab · GitLabHigh · 8.7
    92.4%Top 0.18%
    26.1priority
  23. CVE-2021-39906Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary…
    GitLab · GitLabHigh · 8.7
    60.7%Top 0.85%
    25.9priority
  24. CVE-2021-22242Insufficient input sanitization in Mermaid markdown in GitLab CE/EE version 11.4 and up allows an attacker to exploit…
    GitLab · GitLabHigh · 8.7
    63.6%Top 0.79%
    25.9priority
  25. CVE-2020-13340An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI…
    GitLab · GitLabHigh · 8.7
    66.7%Top 0.71%
    25.9priority
  26. CVE-2022-2230A Stored Cross-Site Scripting vulnerability in the project settings page in GitLab CE/EE affecting all versions from…
    GitLab · GitLabHigh · 8.1
    58.2%Top 0.91%
    25.5priority
  27. CVE-2022-3265A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to…
    GitLab · GitLabHigh · 7.3
    87.0%Top 0.25%
    25.1priority
  28. CVE-2021-22238An issue has been discovered in GitLab affecting all versions starting with 13.3
    GitLab · GitLabMedium · 6.8
    71.8%Top 0.58%
    24.6priority
  29. CVE-2023-0921Allocation of Resources Without Limits or Throttling in GitLab
    GitLab · GitLabMedium · 4.3
    84.4%Top 0.3%
    23.0priority
↑ ↓ chooseEnter openEsc close