Advisories · Technology

GitLab AI Gateway.

Every CVE that names GitLab AI Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-90970 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway
- GitLab AI Gateway
- Code injection
Not analysed yet 2 Oct 2026
CVE-2026-75871 CVE record

CVSS 8.2 High

Server-Side Request Forgery (SSRF) in GitLab AI Gateway
- GitLab AI Gateway
- Server-side request forgery (SSRF)
Not analysed yet 27 Aug 2026
CVE-2026-19889 CVE record

CVSS 8.2 High

Server-Side Request Forgery (SSRF) in GitLab AI Gateway
- GitLab AI Gateway
- Server-side request forgery (SSRF)
Not analysed yet 27 Aug 2026
CVE-2026-1868 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway
- GitLab AI Gateway
- Code injection
Not analysed yet 9 Feb 2026