VDB
CVE-2026-1090
CVE-2026-1090
PUBLISHED
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
EPSS 0.09% · 24.8th percentile
Risk Scores
EPSS Score
0.09%
24.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 10.6.0, 18.8.0, 18.9.0 |
Timeline
- Mar 11, 2026 CVE Published
- Mar 12, 2026 EPSS Score
- Mar 12, 2026 PoC Published
- Mar 12, 2026 CVE Updated
- Mar 12, 2026 PoC Published
- Mar 12, 2026 PoC Published
- Mar 12, 2026 PoC Published
- Mar 13, 2026 EPSS Score
- Mar 14, 2026 EPSS Score
- Mar 15, 2026 EPSS Score
- Mar 16, 2026 EPSS Score
- Mar 17, 2026 EPSS Score