GitLab releases critical security patches for multiple versions
The October 21, 2026 update fixes severe vulnerabilities like integer overflow and improper authentication affecting CE/EE.
See the latest news and media coverage for GitLab. We track all announcements, press releases, and industry mentions in real time, all in one place.
AI-powered software engineering orchestration platform
about.gitlab.comLast updated
In short: GitLab reported strong Q2 results, patched actively exploited vulnerabilities, and expanded agentic AI capabilities.
The October 21, 2026 update fixes severe vulnerabilities like integer overflow and improper authentication affecting CE/EE.
This new early access tool identifies authorization flaws missed by traditional SAST scanners. It is now available to GitLab Ultimate customers for whole-repository scans.
This feature governs build and runtime secrets using code-like permissions, integrating with Kubernetes, Terraform, and OpenBao for unified credential security.
Version 19.5 enables AI agents to run GitLab workflows natively via the Model Context Protocol with permission-based access.
A CVSS score "10.0" vulnerability has been found in "GitLab" that allows server takeover without authentication. The impact affects all versions since 2014. Even with the most recent patches applied, it cannot be guaranteed to be safe...
GitLab on Oct. 12 patched a maximum-severity CVSS 10.0 flaw impacting its Community Edition (CE) and Enterprise Edition (EE) ...
CVE-2026-85706 is a critical GitLab path-traversal vulnerability that has moved beyond theoretical risk into confirmed exploitation. It affects self-managed GitLab CE/EE and could allow an...
GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances.
Track GitLab and your other target companies to get real-time alerts and weekly summaries delivered straight to your inbox.
Browse news for competitors to GitLab and other trending companies.