According to a recent LinkedIn post from OX Security, the company is drawing attention to two newly disclosed GitLab GraphQL vulnerabilities rated 9.4 (critical) and 7.1 (high). The post describes how these CVEs could enable unauthenticated modification or deletion of public projects and user data, as well as state-changing GraphQL mutations via cross-site request forgery.
The LinkedIn post highlights that GitLab.com and GitLab Dedicated have already been patched, while self-managed GitLab users are urged to upgrade to specific versions to mitigate risk. For investors, this focus on emerging software supply chain and application security issues may underscore ongoing demand for security tooling, positioning OX Security to benefit from heightened awareness of DevSecOps risks and compliance requirements.
The post suggests that complex GraphQL behavior, including directives and multiplexed queries, can create exploitable gaps between validation and execution. This emphasis on advanced attack surfaces may reinforce OX Security’s relevance in modern cloud-native development environments, where robust vulnerability detection and response capabilities can be a differentiator in winning enterprise customers and expanding security budgets.