Gerrit
2 CVEs tracked since 2020. Since Dec 2020, none of them reached CISA KEV.
Gerrit CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2020-12 | 2 | 0 |
Products
The products that kept showing up in Gerrit's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 6 most recently published vulnerabilities affecting Gerrit.
- CVE-2026-87722Regular Expression Denial of Service (ReDoS) in Search Query Predicates and REST Filter Endpoints in Gerrit Code Review—
- CVE-2026-87721Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review—
- CVE-2026-87720Incorrect Authorization via Stale ProjectCache Eviction and Repeated .git Suffixes in Gerrit Code Review—
- CVE-2026-2725Improper Authorization in Gerrit allowing Code Review Bypass via "Submitted Together"5.3
- CVE-2020-8920Overoptimization leads to private information leak in Gerrit3.5
- CVE-2020-8919Information leakage in Gerrit3.5
The record
- Peak rank
- #190 in Dec 2020
- Busiest month shown
- Dec 2020, 2 CVEs
- Months with a KEV entry
- 0 since Dec 2020
- Monthly snapshots
- 1 since 2020