CVE-2021-39935CISA KEVEPSS p98.0%

CVE-2021-39935GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

GitLab / Community and Enterprise Editions

Description

GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users to perform Server Side Requests via the CI Lint API.

Scoring

EPSS30.50% probability of exploitation · percentile 98.0% · 2026-06-18T12:00:27Z

CISA KEV entry

Added to KEV: 2026-02-03

(incoming)1

TypeTargetConfidenceTier
KEVEntryGitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerabilitykev-cve-2021-399350%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
GitLab Server-Side Request Forgery (SSRF) Vulnerability
CVE
CVE-2026-4922
CVE
CVE-2025-12029
CVE
CVE-2026-3857
CVE
CVE-2025-6454
CVE
GitLab Community and Enterprise Editions Improper Access Control Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.