H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2026-02-03
Last seen2026-02-03

Confidence

—

GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users to perform Server Side Requests via the CI Lint API.

Labels

exploitedkev

CISA KEV context

Vendor / productGitLab Community and Enterprise Editions
Added2026-02-03
Due date2026-02-24
2 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2021-39935
open
cwe
CWE-918
open