G
GitLab
Security Risk Profile
38
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 4, 2021 to present
1000
Total CVEs
319
Critical+High
5
Exploited
127
Unpatched
Threat Assessment
Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
127
Critical/High
Risk Level
38/100
low
⚠️ 5 Active Exploits⚡ 1 Zero-Days🆕 7Fresh (<7d)📈 33 in Last 30 Days
Severity Distribution
Critical
40High
279Medium
528Low
44Exploit Likelihood
>50% chance
020-50%
15-20%
0<5%
109Age Distribution
Common Weaknesses (CWE)
1
XSS
98
2
Input Validation
37
3
Infoleak
25
4
SSRF
21
5
CSRF
15
Most Affected Products
1. GitLab GitLab4757
2. GitLab GitLab EE259
3. GitLab GitLab CE/EE129
4. GitLab GitLab CE63
5. GitLab GitLab Enterprise Edition19
Recent Vulnerabilities
See more →CVE-2026-89078
CVSS 9.9critical
Double Free in GitLab
Sep 23, 2026🔧 No Patch
CVE-2026-92530
CVSS 4.3medium
Use of Less Trusted Source in GitLab
Sep 23, 2026🔧 No Patch
CVE-2026-92470
CVSS 7.7high
Missing Authorization in GitLab
Sep 23, 2026🔧 No Patch
CVE-2026-92529
CVSS 4.3medium
Incorrect Authorization in GitLab
Sep 23, 2026🔧 No Patch
CVE-2026-92874
CVSS 5.4medium
Incorrect Authorization in GitLab
Sep 23, 2026🔧 No Patch
CVE-2026-92628
CVSS 3.1low
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLab
Sep 23, 2026🔧 No Patch
CVE-2026-93577
CVSS 9.9critical
Integer Overflow or Wraparound in GitLab
Sep 23, 2026🔧 No Patch
EOL-gitlab-19.4
unknown
Sep 17, 2026
CVE-2026-86341
CVSS 4.4medium
Access Control Check Implemented After Asset is Accessed in GitLab
Sep 16, 2026🔧 No Patch
CVE-2024-11222
CVSS 6.4medium
Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab
Sep 16, 2026🔧 No Patch
Monitor GitLab in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.