CVE-2026-85706 is a critical GitLab path-traversal vulnerability that has moved beyond theoretical risk into confirmed ...

GitLab released emergency updates for two critical flaws enabling authenticated users to execute arbitrary code via crafted ...

These email addresses, part of GitLab's "Email work item to this project" feature, contain long-lived tokens that act as ...

A GitLab feature designed to let users create work items through email can be abused as an account-level code delivery ...

GitLab’s non-expiring incoming email token can let a holder commit code with a user’s permissions and trigger CI/CD jobs.

Credit: VentureBeat made with OpenAI ChatGPT-Images-2.5 Anthropic today launched Claude Code Projects, a new way for developers using its hit "vibe coding" harness Claude Code to stay organized as ...

Claude Code Projects could change how developers manage complex AI coding workflows by coordinating threads, sharing memory, and spanning repos, but its biggest benefits are still cloud-only for now.

Threat actors are exploiting a maximum-severity GitLab vulnerability disclosed last week, which could give adversaries an inside track into organizations' software supply chains. CVE-2026-85706, which ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are now exploiting a maximum-severity GitLab vulnerability in attacks.

Compare the best AI code review tools for GitLab in 2026, including GitLab Duo, Qodo, CodeRabbit, Greptile, and SonarQube for enterprise teams.

CVE-2026-85706, a CVSS 10.0 GitLab path traversal, was under active exploitation within 24 hours of disclosure.