GitLab is a web-based Git repository manager with wiki and issue-tracking features. GitLab is similar to GitHub, but GitLab has an open-source version, unlike GitHub.

GitLab

NixOS is a Linux distribution built on top of the Nix package manager. It is completely declarative, its system configurations are reproducible, makes configuration changes reliable and atomic, and eliminates configuration drift.

NixOS

GitLab Enterprise is a self-hosted, scalable, and secure platform that provides DevOps and CI/CD capabilities for software development teams. It offers advanced features, integrations, and support for organizations requiring enhanced collaboration and security. GitLab Enterprise is available in two tiers: Premium and Ultimate.

Gitlab Enterprise

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticated user to execute arbitrary JavaScript in a user's browser due to improper sanitization of entity-encoded content in Mermaid diagrams.

Identifiant CVE	Sévérité	Score	Technologies	Nom du composant	Exploit CISA KEV	A corrigé	Date de publication
CVE-2026-2370	HIGH	8.8	GitLab	gitlab-cng-fips-18.8	Non	Oui	Mar 30, 2026
CVE-2026-3857	HIGH	8.8	GitLab	cpe:2.3:a:gitlab:gitlab	Non	Oui	Mar 25, 2026
CVE-2026-3988	HIGH	7.5	GitLab	cpe:2.3:a:gitlab:gitlab	Non	Oui	Mar 25, 2026
CVE-2026-2995	MEDIUM	5.4	GitLab	cpe:2.3:a:gitlab:gitlab	Non	Oui	Mar 25, 2026
CVE-2026-2973	MEDIUM	5.4	GitLab	gitlab	Non	Oui	Mar 25, 2026

CVE-2026-2973:
GitLab Analyse et atténuation des vulnérabilités

5.4

Apparenté GitLab Vulnérabilités:

Évaluez votre posture de sécurité dans le cloud

Ressources Wiz supplémentaires

PEACH

Prêt(e) à voir Wiz en action ?

CVE-2026-2973: GitLab Analyse et atténuation des vulnérabilités