Attackers don’t need credentials or user interaction to exploit the flaw which could enable supply chain attacks in self-hosted code repositories.

A critical GitLab flaw lets unauthenticated hackers modify or delete public projects and user data via GraphQL, prompting an ...

A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential ...

GitLab vulnerability CVE-2026-19478 carries a CVSS 9.4 rating, letting unauthenticated attackers remotely delete or modify public projects with no login required. An emergency patch released August 17 ...

GitLab has patched CVE-2026-19478, a critical code injection vulnerability that can be exploited without authentication.

GitLab has released emergency security updates after discovering a critical vulnerability that could allow unauthenticated ...

GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an ...

Expedia Group has open-sourced mockql-rs, a Rust CLI that fills @mock-annotated GraphQL fields with LLM-generated data at ...

Google’s query fan-out technique issues multiple background searches based on initial question. This system is active across AI Mode, Deep Search, and some AI Overview results. The approach relies on ...

APIs underpin most modern software systems. Whether you’re building a SaaS dashboard, a mobile app, or coordinating microservices, how you expose your data shapes your velocity, flexibility, and ...