GitLab releases version 19.3 with AI gateway and secrets manager

Analysts have issued 41 Holds across 61 ratings for UiPath, GitLab, and Figma, with consensus targets below current prices for two. Institutions hold 65% to 95% of the float, building positions despite cautious analyst sentiment. UiPath and GitLab have surged 58% and 36% in one month, respectively, exceeding analyst targets. Figma's target aligns with its current price. All three companies reported strong revenue growth in recent quarters.

GitLab Inc. (GTLB) shares rose 7.5% today, driven by a TD Cowen price target increase to $42, positive developer hiring trends, and anticipation of its upcoming earnings report. The company reported 23% revenue growth in its last quarter and recently launched AI-focused products. Insider and hedge fund trading activity was also noted.

Private equity firm Silver Lake's reported talks to acquire Workday (WDAY) for ~$51B sparked a rally in software stocks, as investors reassessed the sector's value. Analysts identified HubSpot (HUBS), Five9 (FIVN), GitLab (GTLB), and Asana (ASAN) as potential takeover targets, citing their data assets and recurring revenue. Workday's stock rose 18% on the news, and KeyBanc analysts suggested valuing software companies at 15x projected free cash flow for buyout scenarios.

BofA Securities raised its price target for GitLab from $38 to $45. The company's stock is currently trading at $42.38, up 2.12% in the day and 4.31% over the week.

GitLab Inc. (GTLB) shares rose about 7% in after-hours Tuesday after the company said it deepened its collaboration with Google Cloud to integrate Vertex AI models into GitLab’s Duo Agent Platform. GitLab said customers can select Vertex AI foundation models, including Gemini, and self-hosted users can use “Bring Your Own Model.”

Depthfirst researcher Yuhang Wu reported a GitLab remote code execution path using two long-standing memory-safety flaws in the Ruby JSON parser Oj. GitLab parses .ipynb diffs with ipynbdiff, enabling authenticated users to submit crafted notebooks that can bypass ASLR and execute commands as the git user. Affected GitLab CE/EE: 15.2.0-18.10.7, 18.11.0-18.11.4, 19.0.0-19.0.1; fixed in 18.10.8, 18.11.5, 19.0.2. Oj affected 3.13.0-3.17.1; fixed 3.17.3.