CISA warns hackers are exploiting this max severity GitLab flaw

A 10/10 GitLab flaw was added to CISA's KEV, giving government agencies just three days to patch.

Perfect-10 GitLab bug under attack days after patch lands

CISA says attackers are exploiting a maximum-severity GitLab flaw that lets unauthenticated miscreants read arbitrary files ...
The Hacker News

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

GitLab patched CVE-2026-85706, a CVSS 10 path traversal flaw enabling unauthenticated file reads, as in-the-wild probes began.
Technobezz

GitLab Patches Critical Flaw Exploited in the Wild

GitLab has released fixes for CVE-2026-85706, a maximum-severity path traversal flaw in the repository commits API that CISA ...
Forkast News

One HTTP Request, Every File on the Server: GitLab’s CVSS 10 Commits-API Flaw Hits Active Exploitation Within Hours

A single HTTP POST to the commits API bypasses all security controls and reads arbitrary files from a GitLab server. CISA ...
thenextweb.com

GitLab now automatically warns against merging API keys into your codebase

GitLab, the hugely popular devops platform, today announced the introduction of secrets detection with version 11.9 of the service. This means that should someone inadvertently include an API key or ...
Linux Journal

Back Up GitHub and GitLab Repositories Using Golang

Want to learn Golang and build something useful? Learn how to write a tool to back up your GitHub and GitLab repositories. GitHub and GitLab are two popular Git repository hosting services that are ...