[ Vendor · 3 CVEs ]
Gerrit
CVEs affecting Gerrit published in the last 30 days, plus any Gerrit CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-87720 | 24 Sep 2026 | CVSS 7.6 | GerritIncorrect Authorization (CWE-863) in project name normalization (ProjectUtil.stripGitSuffix) and ProjectCache eviction logic (ProjectCacheImpl) in… | |
| CVE-2026-87721 | 24 Sep 2026 | CVSS 8.7 | GerritUncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 search query parser (QueryParser / Query.g) in Gerrit Code Review versions… | |
| CVE-2026-87722 | 24 Sep 2026 | CVSS 8.7 | GerritUncontrolled Resource Consumption (CWE-400 / CWE-1333) in regex search query predicates (such as RegexProjectPredicate, RegexRefPredicate… |