Skip to contentGitlab vulnerabilities
Newest
- gitlabImproper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions...CVE-2022-1175Public exploitFix availableEPSS 82.0%8.7 High
- gitlabA hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP...CVE-2022-1162Public exploitFix availableEPSS 75.6%9.1 Critical
- gitlabImproper authorization in GitLab Pages included with GitLab CE/EE affecting all versions from 11...CVE-2022-1148Fix available5.3 Medium
- gitlab, gitlab pages +1 moreA lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14...CVE-2022-1121Fix available5.3 Medium
- gitlabA business logic error in Project Import in GitLab CE/EE versions 14.9 prior to 14.9.2, 14.8...CVE-2022-1111Fix available2.4 Low
- gitlabA denial of service vulnerability when rendering RDoc files in GitLab CE/EE versions 10 to 14.7.7...CVE-2022-1185Fix available6.5 Medium
- gitlabMissing filtering in an error message in GitLab CE/EE affecting all versions prior to 14.7.7, 14...CVE-2022-1120Fix available4.8 Medium
- gitlabA potential DoS vulnerability was discovered in Gitlab CE/EE versions 13.7 before 14.7.7, all...CVE-2022-1174Fix available4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 14...CVE-2022-1188Fix available3.7 Low
- gitlabAn improper access control vulnerability in GitLab CE/EE affecting all versions from 13.11 prior...CVE-2022-1105Fix available4.3 Medium
- gitlabAdding a very large number of tags to a runner in GitLab CE/EE affecting all versions prior to 14...CVE-2022-1099Fix available4.3 Medium
- gitlabA potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1...CVE-2022-1100Fix available4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.2 before 14...CVE-2022-1189Fix available3.1 Low
- gitlabIncorrect authorization in the Asana integration's branch restriction feature in all versions of...CVE-2022-0740Fix available3.1 Low
- gitlabImproper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed...CVE-2022-0741Fix available5.8 Medium
- gitlabA DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE...CVE-2022-0425Fix available5.4 Medium
- gitlabIn all versions of GitLab CE/EE, certain Unicode characters can be abused to commit malicious...CVE-2021-39908Fix available6.5 Medium
- gitlabImproper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7...CVE-2022-0373Fix available4.3 Medium
- gitlabImproper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7...CVE-2022-0390Fix available4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was...CVE-2022-0489Fix available3.5 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4,...CVE-2021-4191Public exploitFix availableEPSS 80.5%5.3 Medium
- gitlabAn issue has been discovered affecting GitLab versions prior to 13.5. An open redirect...CVE-2022-0283Fix available4.7 Medium
- gitlabA vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14...CVE-2022-0136Fix available5.4 Medium
- gitlabIn all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee...CVE-2021-39876Fix available4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10....CVE-2022-0488Fix available3.5 Low
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4,...CVE-2022-0344Fix available3.1 Low
- gitlabA vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a...CVE-2022-0249Fix available3.1 Low
- gitlabAn issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3...CVE-2022-0123Fix available5.9 Medium
- gitlabMissing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE...CVE-2022-0427Fix available7.7 High
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5,...CVE-2022-0738Fix available4.2 Medium
- gitlabInaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE...CVE-2022-0751Fix available6.5 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14...CVE-2022-0371Fix available4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions...CVE-2022-0549Fix available6.5 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14...CVE-2022-0735Fix availableEPSS 13.2%10.0 Critical
- gitlabAn authorization logic error in the External Status Check API in GitLab EE affecting all versions...CVE-2021-39943Fix available4.3 Medium
- gitlabIn all versions of GitLab CE/EE since version 12.0, a lower privileged user can import users from...CVE-2021-39892Fix available4.3 Medium
- gitlabA denial of service vulnerability in GitLab CE/EE affecting all versions starting from 12.0...CVE-2021-39942Fix available4.3 Medium
- gitlabImproper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4,...CVE-2021-39946Fix available8.7 High
- gitlabAn issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3...CVE-2022-0090Fix available6.5 Medium
- gitlabAn issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3...CVE-2022-0093Fix available3.5 Low
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 12.0 before 14.4.5,...CVE-2022-0125Fix available4.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5,...CVE-2022-0154Fix available7.5 High
- gitlabAn issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3...CVE-2022-0124Fix available4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5. Arbitrary...CVE-2022-0244Fix available8.6 High
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.4.5,...CVE-2022-0151Fix available6.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 13.10 before 14.4.5,...CVE-2022-0152Fix available6.5 Medium
- gitlabServer side request forgery protections in GitLab CE/EE versions between 8.4 and 14.4.x, between...CVE-2021-39927Fix available3.5 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under...CVE-2022-0172Fix available5.3 Medium
- gitlab, gitlab runner +1 moreAn uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions...CVE-2021-39939Fix available6.5 Medium
- gitlabMissing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4,...CVE-2021-39930Fix available4.3 Medium
- Show moreLoading…