An attacker came close to exploiting a maximum-severity flaw. Here's what to know.

Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US ...

A remote prompt injection flaw in GitLab Duo allowed attackers to steal private source code and inject malicious HTML. GitLab has since patched the issue. Image: CROCOTHERY/Adobe Stock A newly ...

GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers.

If you operate GitLab in-house, there is a vulnerability you should check today: CVE-2026-97229. It is an integer overflow vulnerability in the CI/CD regular expression compiler, fixed in a critical ...

GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler.

GitLab fixes CVE-2026-110264, a critical flaw that could allow unauthenticated code execution on self-managed versions dating back to 7.0.

GitLab patched a maximum-severity flaw that lets unauthenticated attackers run code on self-managed servers. Experts say: Patch now.

An indirect prompt injection flaw in GitLab's artificial intelligence (AI) assistant could have allowed attackers to steal source code, direct victims to malicious websites, and more. In fact, ...

RapidFort, the leader in Software Supply Chain Security (SSCS) with the largest distribution of curated truly open-source ...

GitLab has launched new features aimed at enhancing security and governance in AI-driven software development, including ...

GitLab describes its new platform as a shared, permission-aware graph infrastructure designed to unify agent context.