Actively exploited vulnerabilities affecting GitLab products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2021-22175https://wildfortech.com/security#CVE-2021-22175This GitLab vulnerability allows attackers to abuse webhook functionality to make the GitLab server issue requests to internal network resources on their behalf — a classic SSRF attack. When webhooks pointing to internal addresses are permitted, an attacker could potentially reach services behind the firewall that should never be externally accessible, enabling reconnaissance or interaction with internal infrastructure. This is especially dangerous in environments where GitLab sits on a network with access to sensitive internal systems.Wed, 18 Feb 2026 00:00:00 GMTGitLabGitLabhttps://wildfortech.com/security#CVE-2021-39935https://wildfortech.com/security#CVE-2021-39935This vulnerability in GitLab's Community and Enterprise Editions allows unauthorized external users to abuse the CI Lint API to trigger server-side requests. In practice, an attacker could use GitLab itself as a proxy to reach internal network resources, bypass perimeter controls, or probe services that should not be externally accessible. This is particularly dangerous in environments where GitLab can reach sensitive internal infrastructure, making it a potential pivot point for deeper network compromise.Tue, 03 Feb 2026 00:00:00 GMTGitLabCommunity and Enterprise Editions