What’s Vulnerable › Products

Gerrit vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Gerrit version is affected

Latest Gerrit vulnerabilities

• CVE-2026-87722 — Regular Expression Denial of Service (ReDoS) in Search Query Predicates and REST Filter Endpoints in Gerrit Code Review (CVSS 8.7)
• CVE-2026-87721 — Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review (CVSS 8.7)
• CVE-2026-87720 — Incorrect Authorization via Stale ProjectCache Eviction and Repeated .git Suffixes in Gerrit Code Review (CVSS 7.6)
• CVE-2026-2725 — Improper Authorization in Gerrit allowing Code Review Bypass via "Submitted Together" (CVSS 5.3)
• CVE-2021-22553 — Heap Memory exhaustion in Gerrit (CVSS 7.5)
• CVE-2020-8920 — Overoptimization leads to private information leak in Gerrit (CVSS 3.5)
• CVE-2020-8919 — Information leakage in Gerrit (CVSS 3.5)