Skip to contentGitlab vulnerabilities
Newest
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 12.4. The regex used...CVE-2020-26414Fix available4.3 Medium
- gitlabAn attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request...CVE-2021-22166Fix available5.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 12.1. Incorrect...CVE-2021-22167Fix available5.3 Medium
- gitlabInsufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an...CVE-2021-22171Fix available7.3 High
- gitlabA regular expression denial of service issue has been discovered in NuGet API affecting all...CVE-2021-22168Fix available4.3 Medium
- gitlabA potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x (>=13...CVE-2020-26411Fix available4.3 Medium
- gitlab, gitlab ce/ee +1 moreA limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >...CVE-2020-26408Fix available5.3 Medium
- gitlab, gitlab ce/ee +1 moreAn issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >=...CVE-2020-13357Fix available4.3 Medium
- gitlab, gitlab ee +1 moreRemoved group members were able to use the To-Do functionality to retrieve updated information on...CVE-2020-26412Fix available3.1 Low
- gitlab, gitlab ce/ee +1 moreAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13...CVE-2020-26413Public exploitFix availableEPSS 34.9%5.3 Medium
- gitlab, gitlab ce/ee +1 moreInformation disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and...CVE-2020-26417Fix available5.3 Medium
- gitlab, gitlab ee +1 moreInformation disclosure in Advanced Search component of GitLab EE starting from 8.4 results in...CVE-2020-26416Fix available4.0 Medium
- gitlabInformation about the starred projects for private user profiles was exposed via the GraphQL API...CVE-2020-26415Fix available4.3 Medium
- gitlab, gitlab ce/ee +1 moreA DOS vulnerability exists in Gitlab CE/EE >=10.3, <13.4.7,>=13.5, <13.5.5,>=13.6, <13.6.2 that...CVE-2020-26409Fix available4.3 Medium
- gitlab, gitlab ce/ee +1 moreA XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6...CVE-2020-26407Fix available5.5 Medium
- gitlab, gitlab ce/ee +1 moreThe Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete...CVE-2020-13359Fix available7.6 High
- gitlab, gitlab ce/ee +1 moreAn issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9. A...CVE-2020-13356Fix available8.2 High
- gitlab, gitlab ce/ee +1 moreAn issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14. A path...CVE-2020-13355Fix available7.5 High
- gitlab, gitlab ce/ee +1 morePath traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8...CVE-2020-26405Fix available7.1 High
- gitlab, gitlab ee +1 moreAn issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular...CVE-2020-13349Fix available4.3 Medium
- gitlab, gitlab ee +1 moreAn issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required...CVE-2020-13348Fix available5.7 Medium
- gitlab, gitlab ce/ee +1 moreCSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able...CVE-2020-13350Fix available3.1 Low
- gitlab, gitlab ce/ee +1 moreInsufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker...CVE-2020-13351Fix available6.5 Medium
- gitlab, gitlab ce/ee +1 moreA potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The...CVE-2020-13354Fix available4.3 Medium
- gitlab, gitlab ce/ee +1 morePrivate group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is...CVE-2020-13352Fix available3.7 Low
- gitlab gitalyGitaly Insufficient Session Expiration vulnerabilityCVE-2020-13353Fix available2.5 Low
- gitlab, gitlab ce/ee +1 moreA vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above...CVE-2020-13358Fix available4.7 Medium
- gitlab, gitlab ee +1 moreCertain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE...CVE-2020-26406Fix available5.3 Medium
- gitlab runnerAn issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before...CVE-2020-13327Fix available6.0 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2...CVE-2020-13341Fix available4.9 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions before 13.2.10, 13.3.7 and 13.4.2:...CVE-2020-13339Fix available5.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2...CVE-2020-13340Fix availableEPSS 66.7%8.7 High
- gitlabAn issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2...CVE-2020-13344Fix available5.7 Medium
- gitlabAn issue has been discovered in GitLab affecting versions prior to 13.2.10, 13.3.7 and 13.4.2:...CVE-2020-13342Fix available2.7 Low
- gitlabMembership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10,...CVE-2020-13346Fix available6.5 Medium
- gitlabIn GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper authorization checks allow a non...CVE-2020-13334Fix available5.9 Medium
- gitlab, gitlab runner +1 moreA command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3...CVE-2020-13347Fix available9.1 Critical
- gitlabImproper group membership validation when deleting a user account in GitLab >=7.12 allows a user...CVE-2020-13335Fix available4.3 Medium
- gitlabA potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3. The api to...CVE-2020-13333Fix available4.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS...CVE-2020-13345Fix available5.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 11.2. Unauthorized...CVE-2020-13343Fix available7.5 High
- gitlabAn issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2. A...CVE-2020-13338Fix available5.4 Medium
- gitlabAn issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for...CVE-2020-13337Fix available7.2 High
- gitlabAn issue has been discovered in GitLab affecting versions from 11.8 before 12.10.13. GitLab was...CVE-2020-13336Fix available4.0 Medium
- gitlabA vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the...CVE-2020-13326Fix available4.3 Medium
- gitlabA vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions...CVE-2020-13321Fix available8.3 High
- gitlabA vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the...CVE-2020-13324Fix available6.5 Medium
- gitlabA vulnerability was discovered in GitLab versions prior 13.1. The comment section of the issue...CVE-2020-13325Fix available7.1 High
- gitlabA vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private...CVE-2020-13323Fix available7.7 High
- gitlabAn issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was...CVE-2020-13331Fix available5.4 Medium
- Show moreLoading…