ZeusQA
Start free

Known exploited vulnerabilities

GitLab vulnerabilities attackers have used

Every GitLab vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 6 GitLab vulnerabilities as exploited in the wild, 4 of them added in the last 12 months and 1 used in ransomware campaigns. The most recent is CVE-2026-97229, added Oct 29, 2026. Community and Enterprise Editions has the most entries (2).

In KEV, all time
6
Added, last 12 months
4
Used in ransomware
1
New CVEs this week
0

By product

Community and Enterprise Editions (2), Community Edition and Enterprise Edition (2), GitLab (1), GitLab CE/EE (1).

Every GitLab entry in CISA KEV

  1. CVE-2026-97229

    Added · due

    GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

    GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a…

  2. CVE-2026-85706

    Added · due

    GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

    GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the…

  3. CVE-2021-22175

    Added · due

    GitLab Server-Side Request Forgery (SSRF) Vulnerability

    GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal network for webhooks are enabled.

  4. CVE-2021-39935

    Added · due

    GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

    GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users to perform Server Side Requests via the CI Lint API.

  5. CVE-2023-7028

    Added · due

    GitLab Community and Enterprise Editions Improper Access Control Vulnerability

    GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover.

  6. CVE-2021-22205

    RansomwareAdded · due

    GitLab Community and Enterprise Editions Remote Code Execution Vulnerability

    GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works