Known vulnerabilities in GitLab AI Gateway

Vendor: GitLab, Inc
Software: GitLab AI Gateway
Software CPE: cpe:2.3:a:gitlab:gitlab_ai_gateway:*:*:*:*:*:*:*:*
Website: https://about.gitlab.com/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab AI Gateway GitLab AI Gateway is affected by 2 known vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153238 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-90970		 CWE-74 Medium
No
No
 19.2.4, 19.3.2, 19.4.1 05.10.2026 SB2026100505
#VU122454 - Improper input validation
CVE-2026-1868		 CWE-20 Medium
No
No
 18.6.2, 18.7.1, 18.8.1 09.02.2026 SB2026020918