CVE-2021-22205

Critical10.0 Published on Apr 23, 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.

Actively exploited

In the CISA exploited-vulnerabilities catalogue since Nov 3, 2021
US federal agencies must remediate it by Nov 17, 2021 (BOD 22-01)
First attack observed 193 days after disclosure
Confirmed by sensors, not only by reports
Used in ransomware campaigns

Apply updates per vendor instructions.

Source: CISA KEV · Jul 13, 2026 Jul 7, 2026 Feb 25, 2026 Jan 17, 2026 Jan 15, 2026 Nov 24, 2025

CVSS score10.0 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness type (CWE)CWE-94, CWE-94

Vendorsgitlab

Affected products

Vendors	Product	Versions
gitlab	gitlab	< 13.8.8

APT

FBI Seizes Seven Domains Supporting Flax Typhoon Scanning and Malware Operations

FBI seized domains allegedly supporting MicroScan and FishHub scanning and malware platforms attributed to China-linked Flax Typhoon operators.

Oct 8, 202623:05 6 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database