GitLab patched CVE-2026-18252 on 26 August 2026. A Developer could make its Duo Claude AI agent run commands in CI. No exploitation has been reported.
On October 21, GitLab released an emergency patch. There are seven versions: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, ...
GitLab has released emergency security updates addressing a critical remote code execution vulnerability that could allow ...
GitLab CVE-2026-110264 scores CVSS 10.0 and lets unauthenticated attackers run code. Fixes landed in 7 branches on Oct. 21, ...
uCreator Android spyware, marketed as YingGai, can steal Telegram two-factor authentication passwords in cleartext before ...
Agoda uses GitLab to consolidate its DevSecOps toolchain, improve security and governance, reduce costs and enhance developer ...
Hello, this is the WEEL Media Department!Between October 20th and 21st, PHP, Node.js, Java, and GitLab—software widely used ...
Ruby patched three Onigmo regex bugs that enabled code execution in GitLab when it compiled attacker-controlled patterns.
GitLab patched a maximum-severity flaw that lets unauthenticated attackers run code on self-managed servers. Experts say: Patch now.
Roku has moved its developer repositories from GitHub to GitLab ahead of its next SDK beta, changing where developers find updates and contribute fixes. The Roku GitLab migration covers documentation, ...
To meet the challenge, GitLab is adding security controls to govern what enters a build, to protect credentials each job can reach, to harden the defensive posture for software delivery, and is ...
Mid-market engineering teams face a difficult balancing act. They need to deliver features faster, maintain reliable ...