GitLab has released critical updates to address multiple vulnerabilities, the most severe of them (CVE-2024-6678) allowing an attacker to trigger pipelines as arbitrary users under certain conditions.

GitLab has addressed a critical severity vulnerability that could allow remote attackers to take over user accounts using hardcoded passwords. The bug (discovered internally and tracked as ...

GitLab recently discovered a critical vulnerability in its Community Edition (CE) and Enterprise Edition (EE) instances, which could allow malicious actors to write arbitrary files while creating a ...

The Indian Computer Emergency Response Team (commonly known by CERT-In), which comes under the Ministry of Electronics & Information Technology, has warned users about multiple vulnerabilities in ...

GitLab has published a fix for a critical security vulnerability found in two of its products, with users told to apply the patch immediately. GitLab is a DevOps software package allowing users to ...

Organizations with self-hosted GitLab instances configured for SAML-based authentication might want to update immediately to new versions of the DevOps platform that the company released this week.

GitLab last week issued an emergency patch covering 16 vulnerabilities, one of them given a critical risk rating, along with three rated high severity. To fix the vulnerabilities, the organisation ...