Critical Vulnerabilities in GitLab Discovered, Enabling DoS Attacks and Data Compromise

Multiple vulnerabilities were discovered in GitLab on 30 July 2026, as reported by CERT-FR. These flaws enable attackers to execute remote denial-of-service (DoS) attacks, compromise data confidentiality, and perform remote indirect code injection (XSS). The notice specifies no CVE identifiers, affected versions, or exact technical mechanisms. The impacts include service disruption, unauthorized data access, and potential exploitation of cross-site scripting vectors. No additional details on attack vectors or mitigation steps are provided in the advisory.