Cloudanix Zero.

scm ci

GitLab: security advisories, deprecations and releases

GitLab, the DevOps platform for source control and CI/CD.

Get GitLab alerts Free. No account. One email, and only when something touches your stack.
Items, 90 days
24
Critical
4
Last critical
13 days ago
This week
3

What your digest would have held this week

3 items from the last 7 days. Zero sends only the ones that touch your stack.

Security 7

  • HIGH NEW THIS WEEK Alpine Linux news · 30 Oct 2026

    GitLab is back: what you need to do

    GitLab service has been restored following a security incident, and administrators are instructed on required post-incident steps.

  • HIGH NEW THIS WEEK GitLab security releases · 30 Oct 2026

    GitLab Runner 19.5.1 released

    GitLab Runner 19.5.1 updates its certificate store to distrust the compromised eMudhra intermediate CA certificates.

    CVE-2026-111943

  • HIGH NEW THIS WEEK Alpine Linux news · 29 Oct 2026

    GitLab security incident: attempted exploitation of CVE-2026-97229

    GitLab detected an attempted exploitation of CVE-2026-97229. No successful breach reported.

    CVE-2026-97229

  • CRITICAL ACT BY 21 OCT 2026 GitLab security releases · 21 Oct 2026

    GitLab 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13 patch release

    Critical security patch release for GitLab CE/EE containing fixes for 12 vulnerabilities including remote code execution, authentication bypass, cache poisoning and access control issues.

    CVE-2026-103515 CVE-2026-105711 CVE-2026-105777 CVE-2026-110264 CVE-2026-112212 CVE-2026-112326 CVE-2026-112378 CVE-2026-12664 CVE-2026-13319 CVE-2026-14288 CVE-2026-15723 CVE-2026-16255

  • CRITICAL ACT BY 8 OCT 2026 GitLab security releases · 12 Oct 2026

    GitLab Critical Patch Release: 19.4.2, 19.3.4, 19.2.8

    GitLab released critical security patches for CE/EE addressing an integer overflow in CI/CD regex compiler allowing unauthenticated RCE, plus multiple authorization bypasses and XSS issues.

    CVE-2026-100755 CVE-2026-101168 CVE-2026-104661 CVE-2026-105458 CVE-2026-14210 CVE-2026-14552 CVE-2026-14814 CVE-2026-16275 CVE-2026-16301 CVE-2026-5954 CVE-2026-6567 CVE-2026-7767 CVE-2026-78335 CVE-2026-81839 CVE-2026-84284 CVE-2026-85529 CVE-2026-92528 CVE-2026-92883 CVE-2026-96893 CVE-2026-97229

  • CRITICAL ACT BY 23 SEPT 2026 GitLab security releases · 3 Oct 2026

    GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7

    GitLab released three patch versions containing security fixes for multiple vulnerabilities including two critical remote code execution issues in regex parsing.

    CVE-2026-10518 CVE-2026-4523 CVE-2026-84739 CVE-2026-89078 CVE-2026-8937 CVE-2026-92470 CVE-2026-92529 CVE-2026-92530 CVE-2026-92628 CVE-2026-92874 CVE-2026-93577

  • CRITICAL ACT BY 23 SEPT 2026 GitLab security releases · 3 Oct 2026

    GitLab Critical Patch Release: 19.0.9, 18.11.12

    GitLab released 19.0.9 and 18.11.12 to fix two critical vulnerabilities (CVE-2026-85706, CVE-2026-87719) via backport for 18.11 and 19.0 users.

    CVE-2026-85706 CVE-2026-87719

Deprecations 14

Releases 3

Only hear about GitLab when it touches your stack

Tell Zero what you run. You get one email, and only on the days something above applies to you.

Get GitLab alerts