Gerrit Gerrit vulnerabilities

CVEs per yearBy the year they were published

1. 20202
2. 20264

Newest CVEs

• CVE-2026-87722

  Regular Expression Denial of Service (ReDoS) in Search Query Predicates and REST Filter Endpoints in Gerrit Code Review

  Gerrit · Gerrit

  High8.7
• CVE-2026-87721

  Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review

  Gerrit · Gerrit

  High8.7
• CVE-2026-87720

  Incorrect Authorization via Stale ProjectCache Eviction and Repeated .git Suffixes in Gerrit Code Review

  Gerrit · Gerrit

  High7.6
• CVE-2026-2725

  Improper Authorization in Gerrit allowing Code Review Bypass via "Submitted Together"

  Gerrit · Gerrit

  Medium6.0
• CVE-2020-8920

  Overoptimization leads to private information leak in Gerrit

  Gerrit · Gerrit

  Low3.5
• CVE-2020-8919

  Information leakage in Gerrit

  Gerrit · Gerrit

  Low3.5