A new patch fixes six important GitLab flaws ...

GitLab has patched a high-severity two-factor authentication bypass impacting community and enterprise editions of its ...

GitLab has open-sourced the core protocol fuzz testing engine it has been using since its 13.4 release. Fuzz testing aims to more effectively find security issues and flaws in business logic by ...

Atlassian, GitLab, and Zoom have released security patches for over two dozen vulnerabilities, including flaws leading to code execution.

GitLab has released critical updates to address multiple vulnerabilities, the most severe of them (CVE-2024-6678) allowing an attacker to trigger pipelines as arbitrary users under certain conditions.

GitLab releases patch for nine flaws, including two critical severity ones The critical flaws allowed threat actors to bypass authentication and could lead to data exfiltration Patch is available now, ...

The platform warns users of on-premises versions to upgrade to the latest versions; SaaS and web versions have been patched.

GitLab has patched a critical and trivial-to-exploit account takeover bug. The attack vector for CVE-2023-7028 is the password reset function. “User account password reset emails could be delivered to ...