773 PoCs | 119 CISA KEV

tag

Gitlab

GitLab Unauthenticated RCE via Workhorse Pre-Auth Upload into ExifTool DjVu Injection (CVE-2021-22205) KEV RW EPSS 100%

CVE-2021-22205 (chains CVE-2021-22204 in ExifTool) web Patched

CVE-2021-22205webCRITICAL 10Patched2026-08-09GitLab Notebook-Diff Oj Parser Memory-Corruption Chain → Unauthenticated-Reach RCE (No CVE Yet)

N/A (no CVE assigned as of 2026-07-27 — researcher disclosure via depthfirst.com blog, covered by The Hacker News) web Unverified

N/AwebCRITICALUnverified2026-07-27GitLab WebSocket GraphqlChannel Unauthorized Method Enumeration — CVE-2026-5173

CVE-2026-5173 web Patched

CVE-2026-5173webHIGHPatched2026-07-05