Gitlab Inc.
No SEC Form 4 filings for $GTLB in the last 30 days.
Simply Wall St says GitLab Inc. appointed Thomas Lloyd as Chief Business and Legal Officer, expanding his remit over product and cloud partnerships, corporate development and strategy, and legal and corporate affairs. The piece links the change to GitLab’s AI and governance packaging and cites forecasts of $1.5 billion revenue and $186.3 million earnings by 2029.
BlackRock, Inc. filed an amended Schedule 13G reporting a passive 4.5% beneficial stake in GitLab Inc. Class A shares. It reported 7,604,097 shares beneficially owned, with sole voting power over 7,300,961 shares and sole dispositive power over 7,604,097 shares, according to the SEC filing.
Depthfirst researchers reported a remote code execution chain affecting GitLab notebook diff rendering. They chained two Oj Ruby JSON parser bugs to achieve command execution in the GitLab Puma worker for authenticated users who can view commit diffs. GitLab patched the issues on June 10, 2026. Affected versions include 15.2.0 through 18.10.7, 18.11.0 through 18.11.4, and 19.0.0 through 19.0.1; fixed in 18.10.8, 18.11.5, and 19.0.2.
Over the past 7 days, alphai's AI scored 1 news story mentioning GTLB (Gitlab Inc.). Coverage has been balanced: 0 bullish, 1 neutral, and 0 bearish.
Recent GTLB coverage spans technology, financial news and regulation.
The executive change could shift how GitLab packages and governs its AI offerings, but the article provides no new financial targets or deal terms.
The disclosure adds a new notable institutional holder, but the article provides no evidence of activism, control, or a transaction.
Depthfirst researchers reported a remote code execution chain affecting GitLab notebook diff rendering. They chained two Oj Ruby JSON parser bugs to achieve command execution in the GitLab Puma worker for authenticated users who can view commit diffs. GitLab patched the issues on June 10, 2026. Affected versions include 15.2.0 through 18.10.7, 18.11.0 through 18.11.4, and 19.0.0 through 19.0.1; fixed in 18.10.8, 18.11.5, and 19.0.2.
A disclosed RCE chain tied to GitLab’s self-managed versions raises immediate patch urgency and breach risk for exposed deployments.
The thesis implies GitLab could benefit if customers expand agent deployments and pay more via consumption rather than seats.
alphai scores every news story that mentions GTLB with an AI model for sentiment and relevance, and aggregates insider trades from Gitlab Inc.'s SEC EDGAR Form 4 filings. Figures refresh continuously.
Simply Wall St says GitLab Inc. appointed Thomas Lloyd as Chief Business and Legal Officer, expanding his remit over product and cloud partnerships, corporate development and strategy, and legal and corporate affairs. The piece links the change to GitLab’s AI and governance packaging and cites forecasts of $1.5 billion revenue and $186.3 million earnings by 2029.
5 min readBlackRock, Inc. filed an amended Schedule 13G reporting a passive 4.5% beneficial stake in GitLab Inc. Class A shares. It reported 7,604,097 shares beneficially owned, with sole voting power over 7,300,961 shares and sole dispositive power over 7,604,097 shares, according to the SEC filing.
2 min readDepthfirst researchers reported a remote code execution chain affecting GitLab notebook diff rendering. They chained two Oj Ruby JSON parser bugs to achieve command execution in the GitLab Puma worker for authenticated users who can view commit diffs. GitLab patched the issues on June 10, 2026. Affected versions include 15.2.0 through 18.10.7, 18.11.0 through 18.11.4, and 19.0.0 through 19.0.1; fixed in 18.10.8, 18.11.5, and 19.0.2.
6 min readDepthfirst researcher Yuhang Wu reported a GitLab remote code execution path using two long-standing memory-safety flaws in the Ruby JSON parser Oj. GitLab parses .ipynb diffs with ipynbdiff, enabling authenticated users to submit crafted notebooks that can bypass ASLR and execute commands as the git user. Affected GitLab CE/EE: 15.2.0-18.10.7, 18.11.0-18.11.4, 19.0.0-19.0.1; fixed in 18.10.8, 18.11.5, 19.0.2. Oj affected 3.13.0-3.17.1; fixed 3.17.3.
7 min readPiper Sandler analyst Rob Owens told clients that five infrastructure software firms are positioned to reduce AI token costs by using proprietary customer data to cut token usage for AI agents. The note named Elastic (ESTC), GitLab (GTLB), MongoDB (MDB), Snowflake (SNOW), and Atlassian (TEAM), citing early 50% to 75% token savings and consumption-based pricing.
7 min readSecurity researchers published proof-of-concept code for a remote code execution flaw in self-managed GitLab affecting multiple versions. The chain targets Oj, a native JSON library used by GitLab’s ipynbdiff when rendering Jupyter Notebook diffs, allowing an authenticated user to execute OS commands on the server. GitLab urged upgrading to patched releases including Oj 3.17.3.
7 min readDepthfirst researcher Yuhang Wu says an exploit chain in the Oj native JSON parser can enable remote code execution on default GitLab installs. The chain combines two long-persisting memory-safety flaws in Oj used by GitLab’s ipynbdiff for .ipynb diffs. Commands run as the “git” user, potentially exposing code and secrets. GitLab patched in 19.0.2, 18.11.5, 18.10.8; GitLab.com was already fixed.
7 min readGitLab (GTLB) released version 19.2, adding Dependency Scanning Auto-Remediation, a Security Review Flow, and expanded GitLab Duo/AI capabilities. The article cites mixed stock performance, with a 90-day return of 45.83% and YTD decline of 13.54%. It also references a valuation narrative with fair value at $33.61 versus $31.28 last close.
4 min readDepthFirst published exploit code (July 24) for a remote code execution chain affecting self-managed GitLab versions 15.2.0-18.10.7, 18.11.0-18.11.4, and 19.0.0-19.0.1. GitLab patched the underlying issue on June 10 without a CVE. Fixes are in 18.10.8, 18.11.5, and 19.0.2, with no workaround.
6 min readSecurity researchers at depthfirst published proof-of-concept code for a GitLab remote code execution flaw patched on June 10. The issue affects self-managed GitLab versions running vulnerable notebook-diff rendering and can let an authenticated user run commands as the git account. GitLab recommends upgrading to 18.10.8, 18.11.5, or 19.0.2.
7 min read
