Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Gerrit 3.12.10, 3.13.9, 3.14.3 Clear all filters
TI-2026-59883 CVE-2026-87722 · GHSA-qgc5-8q25-ffxc

Regular Expression Denial of Service (ReDoS) in Search Query Predicates and REST Filter Endpoints in Gerrit Code Review

Priority HIGH 77

Uncontrolled Resource Consumption (CWE-400 / CWE-1333) in regex search query predicates (such as RegexProjectPredicate, RegexRefPredicate, RegexPathPredicate, and sibling predicates) and REST regex filter endpoints (Rege…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00322 Published 2026-09-24 Fixed in 3.12.10, 3.13.9 +1 CWE-1333
TI-2026-59882 CVE-2026-87721 · GHSA-q3rp-qmhw-57f7

Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review

Priority HIGH 77

Uncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 search query parser (QueryParser / Query.g) in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allo…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00322 Published 2026-09-24 Fixed in 3.12.10, 3.13.9 +1 CWE-400
TI-2026-59881 CVE-2026-87720 · GHSA-c8r3-7jgc-cm9w

Incorrect Authorization via Stale ProjectCache Eviction and Repeated .git Suffixes in Gerrit Code Review

Priority HIGH 68

Incorrect Authorization (CWE-863) in project name normalization (ProjectUtil.stripGitSuffix) and ProjectCache eviction logic (ProjectCacheImpl) in Gerrit Code Review versions 2.16.0 through 3.12.9, 3.13.0 through 3.13.8,…

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00305 Published 2026-09-24 Fixed in 3.12.10, 3.13.9 +1 CWE-613