GitLab 14.2.7 Actively exploited
Attackers are using a vulnerability in this version right now. Upgrade immediately.
Upgrade to 19.3.6
The lowest fixed release that is still supported.
- Known vulnerabilities
- 441 (10 critical, 60 high)
- End of life
- Yes, since 2021-11-22
- Data as of
- 2026-10-24 16:52 UTC
Vulnerabilities
- CVE-2021-39935 medium exploited fixed in 14.3.6
- CVE-2026-110264 critical fixed in 18.11.13
- CVE-2022-0735 critical fixed in 14.6.5
- CVE-2024-6678 critical fixed in 17.1.7
- CVE-2022-2992 critical fixed in 15.1.6
- CVE-2022-2884 critical fixed in 15.1.5
- CVE-2022-2185 critical fixed in 14.10.5
- CVE-2022-1680 critical fixed in 14.9.5
- CVE-2024-9164 critical fixed in 17.2.9
- CVE-2023-5009 critical fixed in 16.2.7
And 431 more with lower severity.
- 6 GitLab vulnerabilities are still under review and not included in this verdict.
Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.