Warning Against Vulnerabilities Exploited in Actual Attacks (GitLab Community Edition and Enterprise Edition)
Overview The Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. Affected Parties GitLab Community Edition. GitLab Enterprise Edition. Vulnerability Information CVE-2026-97229. – The vulnerability is an integer overflow or wraparound vulnerability. Action Items Users of this product must update to the
GitLab Product Security Update Advisory
A security update has been released to address several vulnerabilities in GitLab products. The affected products are GitLab CE/EE and GitLab AI Gateway. The vulnerabilities in GitLab CE/EE include the following: CVE-2026-14814: Insufficient regular expression validation vulnerability. CVE-2026-16301: Inappropriate authorization vulnerability. CVE-2026-92883: XSS vulnerability (a vulnerability where malicious scripts are
