GitLab vulnerability CVE-2026-19478 carries a CVSS 9.4 rating, letting unauthenticated attackers remotely delete or modify public projects with no login required. An emergency patch released August 17 ...

A critical GitLab flaw lets unauthenticated hackers modify or delete public projects and user data via GraphQL, prompting an ...

Attacks on a recently unplanned closed vulnerability in GitLab have been observed. Attackers can, for example, delete ...

A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential ...

Hackers started exploiting CVE-2026-19478, a critical, unauthenticated GitLab vulnerability, shortly after public disclosure.

Attackers can exploit two security vulnerabilities to manipulate or even delete project data. In a warning message, the developers assure that they have fixed versions 18.11.11, 19.0.8, 19.1.6, and 19 ...

GitLab Credits usage caps are now generally available, allowing organizations to set a monthly ceiling on agentic AI spend before it becomes an overage. Administrators can set a subscription level cap ...

GitLab, the hugely popular devops platform, today announced the introduction of secrets detection with version 11.9 of the service. This means that should someone inadvertently include an API key or ...