Threat Watch– active
All incidents
More on Threat Watch
More GitLab incidents
- Shai-Hulud worm wave 2: @testsecuiitytestme/cache-helper npm package — malicious native-addon loader steals credentials (no CVE) Critical · Supply chain
- GitLab: Unauthenticated RCE via Ruby Onigmo regex compiler integer overflow across all releases since 7.0 (CVE-2026-110264) Critical · Patch now
- GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability (CVE-2026-85706) Critical · Patch now · Closed
- GitLab Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-22175) Critical · Patch now · Closed
- GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-39935) High · Patch now · Closed
- GitLab Community and Enterprise Editions Improper Access Control Vulnerability (CVE-2023-7028) Critical · Patch now · Closed
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.