Gerrit

3 known vulnerabilities in Gerrit, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-87722 CVSS 8.7 high Uncontrolled Resource Consumption (CWE-400 / CWE-1333) in regex search query predicates (such as RegexProjectPredicate, RegexRefPredicate…
CVE-2026-87721 CVSS 8.7 high Uncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 search query parser (QueryParser / Query.g) in Gerrit Code Review…
CVE-2026-87720 CVSS 7.6 high Incorrect Authorization (CWE-863) in project name normalization (ProjectUtil.stripGitSuffix) and ProjectCache eviction logic…