Gerrit vulnerabilities
6 published CVEs name Gerrit among the affected products.
- Published CVEs
- 6
- Last 12 months
- 4
- Critical
- 0
- Known exploited
- 0
Critical 0High 3Medium 1Low 2Not scored 0
CVEs per yearBy the year they were published
- 20202
- 20264
Newest CVEs
- CVE-2026-87722
Regular Expression Denial of Service (ReDoS) in Search Query Predicates and REST Filter Endpoints in Gerrit Code Review
Gerrit · Gerrit
High8.7 - CVE-2026-87721
Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review
Gerrit · Gerrit
High8.7 - CVE-2026-87720
Incorrect Authorization via Stale ProjectCache Eviction and Repeated .git Suffixes in Gerrit Code Review
Gerrit · Gerrit
High7.6 - CVE-2026-2725
Improper Authorization in Gerrit allowing Code Review Bypass via "Submitted Together"
Gerrit · Gerrit
Medium6.0 - CVE-2020-8920
Overoptimization leads to private information leak in Gerrit
Gerrit · Gerrit
Low3.5 - CVE-2020-8919
Information leakage in Gerrit
Gerrit · Gerrit
Low3.5