CISA Warns of GitLab Community and Enterprise Editions SSRF Vulnerability Exploited in Attacks

CISA warns that a critical SSRF vulnerability (CVE-2021-39935) in GitLab Community and Enterprise editions is being actively exploited; organizations should apply vendor patches or mitigations (including disabling the CI Lint API if necessary) and review GitLab access logs, with federal agencies required to remediate by Feb 24, 2026 under BOD 22-01.