A long-lived token embedded in GitLab’s issue-creating email address means anyone with the address, not just the project ...

GitLab’s non-expiring incoming email token can let a holder commit code with a user’s permissions and trigger CI/CD jobs.

CVE-2026-85706 is a path traversal vulnerability with a 10 out of 10 CVSS score, affecting both GitLab Community Edition and ...

Explore the latest news, real-world incidents, expert analysis, and trends in Gitlab — only on The Hacker News, the leading ...

Switch emulator Suyu—a fork of the Nintendo-targeted and now-defunct emulation project Yuzu—has been taken down from GitLab following a DMCA request Thursday. But the emulation project’s open source ...

Researchers managed to trick GitLab’s AI-powered coding assistant to display malicious content to users and leak private source code by injecting hidden prompts in code comments, commit messages and ...

GitLab Inc., the intelligent orchestration platform for DevSecOps, today released GitLab 19.4. As agentic automation spreads from individual developers to entire engineering teams, what limits its ...

Compare the best AI code review tools for GitLab in 2026, including GitLab Duo, Qodo, CodeRabbit, Greptile, and SonarQube for enterprise teams.

It's a bit bare-bones for now, but it could evolve into something big.