Security News

GitLab patches critical authentication bypass vulnerabilities
2025-03-13 16:13

GitLab released security updates for Community Edition (CE) and Enterprise Edition (EE), fixing nine vulnerabilities, among which two critical severity ruby-saml library authentication bypass flaws. [...]

GitLab CISO on proactive monitoring and metrics for DevSecOps success
2025-01-09 05:30

In this Help Net Security interview, Josh Lemos, CISO at GitLab, talks about the shift from DevOps to DevSecOps, focusing on the complexity of building systems and integrating security tools. He...

Bitcoin ATM firm Byte Federal hacked via GitLab flaw, 58K users exposed
2024-12-12 16:02

US Bitcoin ATM operator Byte Federal has disclosed a data breach that exposed the data of 58,000 customers after its systems were breached using a GitLab vulnerability. [...]

New Critical GitLab Vulnerability Could Allow Arbitrary CI/CD Pipeline Execution
2024-10-11 06:29

GitLab has released security updates for Community Edition (CE) and Enterprise Edition (EE) to address eight security flaws, including a critical bug that could allow running Continuous...

GitLab warns of critical arbitrary branch pipeline execution flaw
2024-10-10 15:12

GitLab has released security updates to address multiple flaws in Community Edition (CE) and Enterprise Edition (EE), including a critical arbitrary branch pipeline execution flaw. [...]

Exploit code for critical GitLab auth bypass flaw released (CVE-2024-45409)
2024-10-09 12:32

If you run a self-managed GitLab installation with configured SAML-based authentication and you haven’t upgraded it since mid-September, do it now, because security researchers have published an...

GitLab Patches Critical SAML Authentication Bypass Flaw in CE and EE Editions
2024-09-19 05:07

GitLab has released patches to address a critical flaw impacting Community Edition (CE) and Enterprise Edition (EE) that could result in an authentication bypass. The vulnerability is rooted in...

GitLab releases fix for critical SAML authentication bypass flaw
2024-09-18 18:37

GitLab has released security updates to address a critical SAML authentication bypass vulnerability impacting self-managed installations of the GitLab Community Edition (CE) and Enterprise Edition...

Urgent: GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Job Execution
2024-09-12 15:55

GitLab on Wednesday released security updates to address 17 security vulnerabilities, including a critical flaw that allows an attacker to run pipeline jobs as an arbitrary user. The issue,...

GitLab warns of critical pipeline execution vulnerability
2024-09-12 14:50

GitLab has released critical updates to address multiple vulnerabilities, the most severe of them (CVE-2024-6678) allowing an attacker to trigger pipelines as arbitrary users under certain...