GitLab ↗

GitLab · Infrastructure

Track your version:Monitors GitLab and tailors your dashboard to that exact version.

19.4.1 · latest cycle100/100 Healthy

Summary iPlain-English security verdict for GitLab, generated from its current health score, actively-exploited vulnerabilities, and latest supported version.

GitLab currently scores 100/100 — healthy. 3 actively-exploited vulnerabilities (CISA KEV) affect older releases (e.g. CVE-2021-22205) — staying on the latest supported version keeps you clear of them. The latest supported release is 19.4.1. It's on the latest patch with no significant known issues — keep it current.

Disclosure trend iNew CVEs published for GitLab each year (NVD). A higher bar means more disclosures that year — more scrutiny, not necessarily less safe.

'19

'20

'21

'22

'23

'24

'25

'26

1 of its known vulnerability is linked to ransomware campaigns (CISA KEV).

Patch priority — what to act on iThe issues to fix first — actively exploited (CISA KEV) first, then by exploitation probability (EPSS), then severity. Each row's "→ fixed in" is the earliest version that patches it; "see advisory" means no fixed version is published.

Most urgent first — actively exploited, then likeliest to be exploited.

CVE-2021-22205 CRITICAL exploited ransomware Code injection EPSS 100% → fixed in 13.10.3 CVE-2021-22175 MEDIUM exploited Server-side request forgery (SSRF) EPSS 53% → fixed in 13.8.4 CVE-2026-85706 CRITICAL exploited Path traversal EPSS 9% → fixed in 19.3.2 CVE-2026-19478 CRITICAL Code injection EPSS 6% → fixed in 19.2.4 CVE-2026-89078 CRITICAL Double free EPSS — → fixed in 19.3.3 CVE-2026-93577 CRITICAL Integer overflow EPSS — → fixed in 19.3.3 CVE-2026-87719 CRITICAL Insecure deserialization EPSS — → fixed in 19.3.2

See all 104 known GitLab CVEs & security history →

Get alerted about GitLab

Be emailed the moment GitLab gets a newly exploited vulnerability (CISA KEV) or a release reaches end of life. Free · double opt-in · unsubscribe anytime.

We email only on real events for GitLab — no marketing, no sharing, and we never know what you run. Track your whole stack →

Versions & lifecycle iWhen each release line stops receiving security patches (end-of-life). After EOL there are no more fixes — plan upgrades before these dates.

How long each GitLab release line is supported — and when it sunsets. Select a line for its full report.

Dec17'26 GitLab 19.4EOL 2026-12-17

Nov19'26 GitLab 19.3EOL 2026-11-19

Oct15'26 GitLab 19.2EOL 2026-10-15

Sept17'26 GitLab 19.1ended 2026-09-17

Aug20'26 GitLab 19.0ended 2026-08-20

Jul16'26 GitLab 18.11ended 2026-07-16

Jun18'26 GitLab 18.10ended 2026-06-18

May21'26 GitLab 18.9ended 2026-05-21

Apr16'26 GitLab 18.8ended 2026-04-16

Mar19'26 GitLab 18.7ended 2026-03-19

Feb19'26 GitLab 18.6ended 2026-02-19

Jan15'26 GitLab 18.5ended 2026-01-15

Full GitLab end-of-life dates & support timeline →

19.4 latest 19.4.1 Supported until 2026-12-1719.4.1 → 19.3 latest 19.3.3 Supported until 2026-11-1919.3.3 → 19.2 latest 19.2.7 Supported until 2026-10-1519.2.7 → 19.1 latest 19.1.8 End of life ended 2026-09-1719.1.8 → 19.0 latest 19.0.9 End of life ended 2026-08-2019.0.9 → 18.11 latest 18.11.12 End of life ended 2026-07-1618.11.12 → 18.10 latest 18.10.8 End of life ended 2026-06-1818.10.8 → 18.9 latest 18.9.8 End of life ended 2026-05-2118.9.8 → 18.8 latest 18.8.11 End of life ended 2026-04-1618.8.11 → 18.7 latest 18.7.7 End of life ended 2026-03-1918.7.7 → See all upcoming end-of-life dates →

Frequently asked

Is GitLab safe and patched?

What should I do about GitLab now?

Upgrade GitLab to the latest supported release (19.4.1) or later, which clears the actively-exploited issues affecting older versions, then confirm against GitLab's official advisory.

When does GitLab reach end-of-life?

The latest supported GitLab release is 19.4.1. After end-of-life a release no longer receives security patches.

Which versions of GitLab are still receiving security updates?

Supported GitLab release lines (latest 19.4.1): 19.4, 19.3, 19.2. End-of-life releases no longer receive security patches.

Latest security news for GitLab BETA

Attributed third-party reporting linked to GitLab — newest first. We surface and link the source; we don’t assert our own findings. About Emerging →

Patch available GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted ServersThe Hacker News · 02 Oct 2026 · medium confidence Patch available GitLab AI Gateway Critical Patch Release: 19.2.4, 19.3.2, and 19.4.1GitLab · 02 Oct 2026 · medium confidence Patch available GitLab Critical Patch Release: 19.0.9, 18.11.12GitLab · 23 Sept 2026 · CVE-2026-85706 · high confidence Patch available GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7GitLab · 23 Sept 2026 · medium confidence Exploited CVE-2026-85706: Critical GitLab Path Traversal Exploited in the WildRapid7 · 14 Sept 2026 · CVE-2026-85706 · high confidence

More across all tracked software on the Emerging feed →

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against GitLab's official advisory before you patch or upgrade — GitLab official site ↗