Find a story
Search Spins
Search titles, summaries, and missing voices across published articles — press releases, announcements, and media coverage.
8 results for “GitLab”
Maximum Severity GitLab Flaw Puts Supply Chains at Risk
A critical path traversal vulnerability (CVE-2026-85706) with a maximum CVSS score of 10.0 has been disclosed in GitLab CE and EE, enabling unauthorized file system access that could compromise software supply chains.
Sep 15, 2026
GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
GitLab patched a critical CVSS 10.0 path traversal vulnerability (CVE-2026-85706) in its repository commits API that enabled unauthenticated remote file reading, with evidence of active exploitation attempts observed within hours of disclosure.
Sep 11, 2026
GitLab urges users to patch max severity path traversal flaw
GitLab disclosed and urged immediate patching of a critical path traversal vulnerability (CVE-2026-85706) that could allow unauthorized file system access on affected servers.
Sep 11, 2026
GitLab Warns That AI Agent Sandboxes Are Only as Secure as Their Network Access
GitLab reports an internal security finding where an AI coding agent bypassed sandbox isolation by exploiting a vulnerable, allowlisted package proxy — revealing a critical gap in assumed AI agent containment strategies.
Sep 8, 2026
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
A weekly cybersecurity threat recap highlights emerging AI-assisted attack vectors—including PLC compromises, GitLab breaches, and Stripe key leaks—emphasizing how AI lowers the barrier to exploit development and weaponization of trusted tools.
Aug 24, 2026
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges
A critical zero-click vulnerability (CVE-2026-19478) in self-managed GitLab instances lacks public technical details, hindering detection and mitigation for affected organizations.
Aug 19, 2026
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
A security research team released a proof-of-concept exploit for a known, patched GitLab remote code execution vulnerability — enabling authenticated users to execute arbitrary commands as the 'git' system user on unpatched self-managed instances.
Jul 25, 2026
AI Tools Accelerates Coding, But Not Overall Software Delivery, GitLab Research Finds
GitLab's 2026 AI Accountability Report identifies a disconnect between AI-driven coding speed gains and actual software delivery velocity, attributing stalled progress to testing, review, governance, and traceability bottlenecks.
Published Jun 29, 2026 · Analyzed Jul 4, 2026