Browse articles that include the security tag
Recent posts
Security Labs
Critical remote code execution in Serena, a popular MCP coding agent
GitLab's Threat Research Group found a critical template injection in Serena that runs attacker code the moment a developer opens a repository.
Security Labs
A sandbox is only as closed as what an AI agent can reach
Stuck in an evaluation with no way out, an AI agent escaped in an hour through the one service on its allowlist. Here's the gap that opened.
Security
How GitLab tracks vulnerabilities through refactors and reformatting
Learn how GitLab's improved Scope+Offset fingerprinting keeps vulnerability tracking stable across comments, blank lines, and reformatting.
Security
GitLab Secrets Manager adds ESO, Terraform, API support
Simplify credential management across your stack. GitLab Secrets Manager provides secure retrieval in Kubernetes, Terraform, and external workflows.
Security
Secure every commit to production with Claude and GitLab
Claude Security catches vulnerabilities inside a coding session. GitLab picks up from there, scanning, enforcing policy, and producing audit evidence for the software lifecycle.
Security
When a version bump breaks your build, GitLab fixes it
Automatically upgrade dependencies, adapt code for breaking changes, and route changes for approval — only GitLab does it natively, with full context.
Security
GitLab Duo Security Review spots logic flaws scanners miss
Use AI-driven security reasoning to detect authorization gaps, business-logic errors, and race conditions while code is still under review.
Find out which plan works best for your team
Learn about pricingLearn about what GitLab can do for your team
Talk to an expert