Gitlab — CraftedSignal Threat Feed

GitLab Jira Connect Authentication Bypass Vulnerability (CVE-2026-2370)

hello@craftedsignal.io — Mon, 30 Mar 2026 00:16:01 +0000

GitLab has addressed a critical vulnerability, CVE-2026-2370, affecting GitLab CE/EE installations with Jira Connect enabled. This vulnerability impacts versions 14.3 up to 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1. The vulnerability stems from improper authorization checks, which enable an authenticated user with minimal workspace permissions within Jira to potentially obtain GitLab installation credentials. This, in turn, allows the attacker to impersonate the GitLab application…

GitLab Improper HTML Sanitization Vulnerability (CVE-2026-2995)

hello@craftedsignal.io — Thu, 26 Mar 2026 12:00:00 +0000

GitLab has addressed CVE-2026-2995, a vulnerability affecting GitLab Enterprise Edition. The flaw resides in versions 15.4 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1. An authenticated attacker could exploit this vulnerability to inject arbitrary HTML content into user profiles, specifically targeting the addition of unauthorized email addresses. This is due to improper sanitization of HTML within GitLab’s user profile management features. Successful exploitation can lead to…

GitLab GraphQL Denial of Service Vulnerability (CVE-2026-3988)

hello@craftedsignal.io — Thu, 26 Mar 2026 12:00:00 +0000

CVE-2026-3988 is a denial-of-service (DoS) vulnerability affecting GitLab CE/EE. The vulnerability resides in the processing of GraphQL requests and stems from improper input validation. An unauthenticated attacker can exploit this flaw by sending specially crafted GraphQL requests, causing the GitLab instance to become unresponsive, effectively denying service to legitimate users. The affected versions include all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1…

GitLab GraphQL CSRF Vulnerability (CVE-2026-3857)

hello@craftedsignal.io — Thu, 26 Mar 2026 12:00:00 +0000

GitLab has addressed a critical security flaw, identified as CVE-2026-3857, within its Community Edition (CE) and Enterprise Edition (EE). This vulnerability impacts GitLab instances running versions 17.10 up to, but not including, 18.8.7, versions 18.9 up to 18.9.3, and versions 18.10 up to 18.10.1. The core issue lies in insufficient Cross-Site Request Forgery (CSRF) protection when handling GraphQL mutations. An unauthenticated attacker could exploit this by crafting malicious web pages…