|
Orbit and API networking access
|
|
3
|
223
|
July 9, 2026
|
|
Orbit Tracer Security Agent - GitLab Duo Agent That Reduces Vulnerability Analysis from 4+ Hours to Minutes
|
|
0
|
84
|
June 24, 2026
|
|
Pentest scan says "Cookie without HttpOnly flag set" for /admin/usage_trends
|
|
2
|
235
|
May 20, 2026
|
|
Pentest scan says “OPTIONS method is enabled” for /api/v4/usage_data/track_event
|
|
2
|
152
|
May 20, 2026
|
|
Enforce Secret Push Protection on sub-group level
|
|
0
|
67
|
May 15, 2026
|
|
Encryption at rest of variables in database
|
|
4
|
491
|
April 30, 2026
|
|
Multiple CVEs nginx < 1.29.7 (Gitlab Omnibus v18.10.1-ee)
|
|
4
|
784
|
April 29, 2026
|
|
X-XSS- Protection is set to 0 in collect_events end point
|
|
3
|
438
|
April 17, 2026
|
|
How to prevent downstream .gitlab-ci.yml being modified by developers (role)?
|
|
1
|
168
|
April 2, 2026
|
|
Removing project from security montoring with more than 100 projects set
|
|
4
|
190
|
February 11, 2026
|
|
Semgrep.sarif: no such file or directory Error on Autoscaler executor
|
|
0
|
259
|
January 14, 2026
|
|
Again, locked due to an excessive number of unsuccessful sign in attempts
|
|
3
|
494
|
December 29, 2025
|
|
Account GITLAB has been locked due to an excessive number of unsuccessful sign in attempts' has been received
|
|
2
|
1792
|
December 22, 2025
|
|
Disabling GraphQL Introspection
|
|
4
|
2044
|
December 12, 2025
|
|
(SOLVED) Security issue? Getting strange "Unlock instructions" emails, are user emails leaked?
|
|
8
|
961
|
December 10, 2025
|
|
Posting a comment with preformatted HTML code renders that HTML during submission
|
|
1
|
338
|
November 18, 2025
|
|
SAST jobs are not being executed
|
|
0
|
361
|
October 10, 2025
|
|
How to extend expiration of access tokens
|
|
11
|
33631
|
October 9, 2025
|
|
The status of issues changed from False positive to Needs triage automatically
|
|
0
|
169
|
October 4, 2025
|
|
Backups running slow in podman container gitlab-ee:18.2.4-ee.0; messages on host from permissive SEClinux Oralce Linux
|
|
0
|
67
|
September 8, 2025
|
|
Pentest report showing Excessive exposed headers and allowed http methods for graphql endpoint
|
|
1
|
194
|
September 2, 2025
|
|
It shouldn't be possible to change password without 2FA
|
|
0
|
66
|
August 25, 2025
|
|
Secret Detection started to fail today due to token appearing in .git/config
|
|
3
|
487
|
August 6, 2025
|
|
Turn-off "Unknown sign-in from new location"?
|
|
4
|
6564
|
August 4, 2025
|
|
How to setup user to audit all projects' settings (approval rules)?
|
|
0
|
79
|
July 17, 2025
|
|
Reporting malicious repository
|
|
0
|
105
|
June 21, 2025
|
|
Developer docs or information on how to create a new secrets provider?
|
|
0
|
340
|
May 3, 2025
|
|
CE GitLab contacting snowplowstg.trx.gitlab.net
|
|
2
|
463
|
May 11, 2025
|
|
GitLab Security Dashboard does not display vulnerability reports when the job fails
|
|
0
|
440
|
May 8, 2025
|
|
GitLab Advanced Security discrepancies in dashboard for dependency scanning and SAST
|
|
3
|
450
|
April 21, 2025
|