Vendor
gitlab
On CISA KEV5Public exploit25Avg CVSS5.6
CVEs in the catalog
1,132
since 2018-03
Months in the top 100
70
months with a stored rank
Best rank
#6
one month recomputed
History
CVEs per ranked month
Last 24 of 70 ranked months. 0.4% of its CVEs are on the CISA KEV catalog.
Oct 24Sep 26
| Month | CVEs | Critical | KEV | Rank |
|---|---|---|---|---|
| Sep 26 | 28 | 4 | 1 | #46 |
| Aug 26 | 16 | 1 | #70 | |
| Jul 26 | 20 | #42* | ||
| Jun 26 | 24 | #31* | ||
| May 26 | 31 | #27* | ||
| Apr 26 | 22 | #31* | ||
| Mar 26 | 27 | #30* | ||
| Feb 26 | 26 | 1 | #25* | |
| Jan 26 | 13 | #40* | ||
| Dec 25 | 11 | #46* | ||
| Nov 25 | 14 | #28* | ||
| Oct 25 | 10 | #48* | ||
| Sep 25 | 16 | #29* | ||
| Aug 25 | 15 | #31* | ||
| Jul 25 | 11 | #40* | ||
| Jun 25 | 20 | #19* | ||
| May 25 | 14 | #29* | ||
| Apr 25 | 8 | #48* | ||
| Mar 25 | 19 | #23* | ||
| Feb 25 | 19 | 1 | #15* | |
| Jan 25 | 9 | #45* | ||
| Dec 24 | 12 | #26* | ||
| Nov 24 | 12 | #53* | ||
| Oct 24 | 10 | 1 | #39* |
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| gitlab | 1,068 | 94% |
| gitlab ce ee | 22 | 2% |
| gitlab community and enterprise editions | 13 | 1% |
| gitlab ee | 10 | 0.9% |
| gitlab runner | 6 | 0.5% |
| openshift pipelines | 4 | 0.4% |
| red hat openshift container platform 4 | 4 | 0.4% |
| dast | 2 | 0.2% |
| gitlab ai gateway | 2 | 0.2% |
| gitlab community edition | 2 | 0.2% |
| gitlab enterprise edition | 2 | 0.2% |
| gitlab shell | 2 | 0.2% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-770 | 81 | 7% |
| CWE-79 | 80 | 7% |
| CWE-863 | 79 | 7% |
| CWE-862 | 59 | 5% |
| CWE-1333 | 32 | 3% |
| CWE-639 | 27 | 2% |
| CWE-284 | 19 | 2% |
| CWE-400 | 18 | 2% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-90970 | CWE-1336 | 1 | 9.9 | 2026-10-02 |
| CVE-2026-4523 | CWE-862 | none yet | 3.7 | 2026-09-29 |
| CVE-2026-8937 | CWE-862 | none yet | 4.3 | 2026-09-29 |
| CVE-2026-10518 | CWE-863 | none yet | 4.3 | 2026-09-29 |
| CVE-2026-84739 | CWE-79 | none yet | 8.7 | 2026-09-29 |
| CVE-2026-89078 | CWE-415 | none yet | 9.9 | 2026-09-23 |
| CVE-2026-92530 | CWE-348 | none yet | 4.3 | 2026-09-23 |
| CVE-2026-92470 | CWE-862 | none yet | 7.7 | 2026-09-23 |
| CVE-2026-92529 | CWE-863 | none yet | 4.3 | 2026-09-23 |
| CVE-2026-92874 | CWE-863 | none yet | 5.4 | 2026-09-23 |
| CVE-2026-92628 | CWE-362 | none yet | 3.1 | 2026-09-23 |
| CVE-2026-93577 | CWE-190 | none yet | 9.9 | 2026-09-23 |
| CVE-2026-86341 | CWE-1280 | none yet | 4.4 | 2026-09-16 |
| CVE-2024-11222 | CWE-367 | none yet | 6.4 | 2026-09-16 |
| CVE-2025-14871 | CWE-770 | none yet | 7.5 | 2026-09-16 |