Gerrit (Google) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 116 known versions, newest CVE from 2026-05-13. Vendor: Google.

CVEs of Gerrit

• CVE-2026-2725 - CVSS 6 (medium), 2026-05-13: Incorrect authorization in the "submitted together" feature in Gerrit versions 2.12 and later allows an authenticated attacker with force push permissions on…
• CVE-2021-22553 - CVSS 7.5 (high), 2021-02-17: Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not automatically dispose of the session.…
• CVE-2020-8919 - CVSS 3.5 (low), 2020-12-10: An information leak vulnerability exists in Gerrit versions prior to 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where a missing access check on the branch REST…
• CVE-2020-8920 - CVSS 3.5 (low), 2020-12-10: An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the…