GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

GitLab fixes CVE-2026-110264, a critical flaw that could allow unauthenticated code execution on self-managed versions dating back to 7.0.

GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13 | GitLab Docs

Learn more about GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13 for GitLab Community Edition (CE) and Enterprise Edition (EE).

GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7 | GitLab Docs

Learn more about GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7 for GitLab Community Edition (CE) and Enterprise Edition (EE).

Open Source is a privilege. Not a right. | devroom.io

Edit: this is not a Gitlab specific issue. I’ve seen it before and I’m seeing it again at the Gitlab project. The past few months I’ve been contributing to the Gitlab project. This has been a great experience, mostly because Gitlab has become a very popular project with over 2.3k watchers right now.

Security incident detection | GitLab Docs

Learn more about Security incident detection in the GitLab documentation.

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown | Wiz Blog

A CVSS 8.7 vulnerability in GitHub Enterprise Server allows remote code execution. Read the threat brief and find vulnerable GHES instances from Wiz.

Announcing The GitLab Issue Board

Strengthen your Release Management Process: announcing the GitLab Issue Board!

Our big Frontend plan revealed

Our long term plan to make GitLab as fast and performant as possible with Vue and webpack.

jdalrymple/gitbeaker

🦊🧪 A comprehensive and typed Gitlab SDK for Node.js, Browsers, Deno and CLI

Why we chose Vue.js

Why GitLab went with Vue.js

How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories - Kudelski Security Research Center

Aug 19, 2025 - Nils Amiet -

GitHub - msanft/CVE-2025-55182: Explanation and full RCE PoC for CVE-2025-55182

Explanation and full RCE PoC for CVE-2025-55182. Contribute to msanft/CVE-2025-55182 development by creating an account on GitHub.

Code Repository - Git Source Control | Harness

Host Git repositories in Harness, manage pull requests, and connect every commit to secure CI/CD workflows with source-to-deploy traceability.

CodeQL 2.26.0 adds Kotlin 2.4.0 support and AI prompt injection detection - GitHub Changelog

CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.26.0, which adds support for Kotlin 2.4.0,…

Support ActivityPub for GitLab (#11247) · Epics · GitLab.org · GitLab

Gitlab/ActivityPub Design Documents by @oelmekki

Summary of CVE-2025-55182 - Vercel

Vercel has provided a patch for CVE-2025-55182 affecting any frameworks allowing Server Components usage.