GitLab said it resolved CI/CD failures and slower interface performance affecting a limited number of GitLab.com customers after several days of intermittent platform disruptions.

GitLab released emergency patches v19.4.2, v19.3.5, and v19.2.8. These apply to both Community Edition (CE) and Enterprise ...

GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that ...

GitLab fixed CVE-2026-97229 (CVSS 10.0), a CI/CD flaw that could allow unauthenticated code execution under certain ...

The critical flaw could let unauthenticated attackers execute code on GitLab servers, while others involved pipeline security ...

GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular ...

GitLab’s non-expiring incoming email token can let a holder commit code with a user’s permissions and trigger CI/CD jobs.

A remote code execution (RCE) vulnerability reaching the maximum severity of CVSS 10.0 has been patched in GitLab.

A long-lived token embedded in GitLab’s issue-creating email address means anyone with the address, not just the project owner, can push code and trigger CI/CD jobs subject to the account’s existing ...

GitLab has released security updates to address multiple vulnerabilities in the company's DevSecOps platform, including ones enabling attackers to take over accounts and inject malicious jobs in ...