GitLab patched a maximum-severity vulnerability that could allow an unauthenticated attacker to read arbitrary files from a self-managed server. CISA added the flaw to its Known Exploited ...

GitLab, the hugely popular devops platform, today announced the introduction of secrets detection with version 11.9 of the service. This means that should someone inadvertently include an API key or ...

Popular DevSecOps platform GitLab is being actively targeted by hackers attempting to exploit a recently patched, critical path traversal vulnerability. See Also: Reduce Risk and Improve Response ...

Threat actors are exploiting a maximum-severity GitLab vulnerability disclosed last week, which could give adversaries an inside track into organizations' software supply chains. CVE-2026-85706, which ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are now exploiting a maximum-severity GitLab vulnerability in attacks. GitLab's DevSecOps platform is used by over ...

One bug linked a stranger to an existing LDAP account through an email lookup nobody sanitized. The other let an unauthenticated user rewrite the map clients trust to find the identity provider. Same ...

GitLab urged users on Thursday to patch their servers immediately against a maximum-severity path traversal vulnerability tracked as CVE-2026-85706. The security flaw, discovered by a security ...