netVigilance Vulnerability intelligence since 2004

GitLab

4 GitLab vulnerabilities with confirmed exploitation in the wild, as published by CISA; 4 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for GitLab
Vulnerability Status
overdue 183d2026-03-11 CVE-2021-22175 GitLab / GitLab GitLab Server-Side Request Forgery (SSRF) Vulnerability 2026-02-18 9.8 past due
overdue 198d2026-02-24 CVE-2021-39935 GitLab / Community and Enterprise Editions GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability 2026-02-03 7.5 past due
overdue 841d2024-05-22 CVE-2023-7028 GitLab / GitLab CE/EE GitLab Community and Enterprise Editions Improper Access Control Vulnerability 2024-05-01 9.8 past due
overdue 1758d2021-11-17 CVE-2021-22205 GitLab / Community and Enterprise Editions GitLab Community and Enterprise Editions Remote Code Execution Vulnerability 2021-11-03 10.0 past dueransomware