GitLab
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 28, 2022 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →GitLab CVE-2026-97229 (CVSS 10.0) went into CISA KEV on Oct 29, due Nov 1. If your GitLab runs on a system Ruby, the GitLab upgrade alone does not fix it
Self-managed GitLab: CVE-2026-97229 (CVSS 10, unauthenticated RCE via crafted CI/CD config) is in CISA KEV, deadline 1 Nov
GitLab: a critical 10/10 vulnerability that went undetected for 12 years - how to protect your server
[MEGATHREAD] October 2026 Cybersecurity Incidents: PHP2Shell, LiteLLM, eMudhra, GitLab, and more
Integer Overflow or Wraparound in GitLab
Incorrect Authorization in GitLab
Authorization Bypass Through User-Controlled Key in GitLab
Use of Incorrectly-Resolved Name or Reference in GitLab
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
Incorrect Authorization in GitLab
Monitor GitLab in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.