Vendor
gitlab
On CISA KEV5Public exploit24Avg CVSS5.6
CVEs in the catalog
1,105
since 2018-03
Months in the top 100
69
months with a stored rank
Best rank
#6
one month recomputed
History
CVEs per ranked month
Last 24 of 69 ranked months. 0.5% of its CVEs are on the CISA KEV catalog.
Sep 24Aug 26
| Month | CVEs | Critical | Rank |
|---|---|---|---|
| Aug 26 | 16 | 1 | #69 |
| Jul 26 | 20 | #42* | |
| Jun 26 | 24 | #31* | |
| May 26 | 31 | #27* | |
| Apr 26 | 22 | #31* | |
| Mar 26 | 27 | #30* | |
| Feb 26 | 26 | 1 | #25* |
| Jan 26 | 13 | #40* | |
| Dec 25 | 11 | #46* | |
| Nov 25 | 14 | #28* | |
| Oct 25 | 10 | #48* | |
| Sep 25 | 16 | #29* | |
| Aug 25 | 15 | #31* | |
| Jul 25 | 11 | #40* | |
| Jun 25 | 20 | #19* | |
| May 25 | 14 | #29* | |
| Apr 25 | 8 | #48* | |
| Mar 25 | 19 | #23* | |
| Feb 25 | 19 | 1 | #15* |
| Jan 25 | 9 | #45* | |
| Dec 24 | 12 | #26* | |
| Nov 24 | 12 | #53* | |
| Oct 24 | 10 | 1 | #39* |
| Sep 24 | 20 | 1 | #18* |
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| gitlab | 1,042 | 94% |
| gitlab ce ee | 22 | 2% |
| gitlab community and enterprise editions | 13 | 1% |
| gitlab ee | 10 | 0.9% |
| gitlab runner | 6 | 0.5% |
| openshift pipelines | 4 | 0.4% |
| red hat openshift container platform 4 | 4 | 0.4% |
| dast | 2 | 0.2% |
| gitlab community edition | 2 | 0.2% |
| gitlab enterprise edition | 2 | 0.2% |
| gitlab shell | 2 | 0.2% |
| gitlab vscode extension | 2 | 0.2% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-770 | 79 | 7% |
| CWE-79 | 77 | 7% |
| CWE-863 | 74 | 7% |
| CWE-862 | 53 | 5% |
| CWE-1333 | 32 | 3% |
| CWE-639 | 27 | 2% |
| CWE-284 | 19 | 2% |
| CWE-400 | 18 | 2% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-85706 | CWE-22 | 1 | 10 | 2026-09-12 |
| CVE-2026-87719 | CWE-502 | none yet | 9.9 | 2026-09-12 |
| CVE-2026-10053 | CWE-22 | 1 | 8.5 | 2026-08-23 |
| CVE-2026-19650 | CWE-352 | 1 | 7.1 | 2026-08-17 |
| CVE-2026-19478 | CWE-94 | 1 | 9.4 | 2026-08-17 |
| CVE-2025-9486 | CWE-266 | none yet | 3.3 | 2026-08-12 |
| CVE-2026-4879 | CWE-862 | none yet | 4.3 | 2026-08-12 |
| CVE-2026-6821 | CWE-862 | none yet | 4.3 | 2026-08-12 |
| CVE-2026-15217 | CWE-79 | none yet | 8.7 | 2026-08-12 |
| CVE-2026-15216 | CWE-79 | none yet | 8.7 | 2026-08-12 |
| CVE-2026-16494 | CWE-862 | none yet | 7.1 | 2026-08-12 |
| CVE-2026-18433 | CWE-863 | none yet | 4.3 | 2026-08-12 |
| CVE-2026-19228 | CWE-639 | none yet | 8.5 | 2026-08-12 |
| CVE-2026-7427 | CWE-770 | none yet | 5.3 | 2026-08-12 |
| CVE-2026-8667 | CWE-863 | none yet | 4.3 | 2026-08-12 |