Skip to contentGitlab vulnerabilities
Newest
- gitlabImproper Access Control in GitLabCVE-2024-6385Fix available9.6 Critical
- gitlabImproper Restriction of Rendered UI Layers or Frames in GitLabCVE-2024-2177Fix available6.8 Medium
- gitlabUncontrolled Resource Consumption in GitLabCVE-2024-1493Fix available6.5 Medium
- gitlabUncontrolled Resource Consumption in GitLabCVE-2024-1816Fix available5.3 Medium
- gitlabImproper Access Control in GitLabCVE-2024-2191Fix available5.3 Medium
- gitlabExposure of Sensitive Information to an Unauthorized Actor in GitLabCVE-2024-3115Fix available4.3 Medium
- gitlabImproper Authorization in GitLabCVE-2024-3959Fix available6.5 Medium
- gitlabImproper Access Control in GitLabCVE-2024-4011Fix available3.1 Low
- gitlabUncontrolled Resource Consumption in GitLabCVE-2024-4557Fix available6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2024-4901Fix availableEPSS 33.5%8.7 High
- gitlabImproper Access Control in GitLabCVE-2024-5655Fix available9.6 Critical
- gitlabImproper Access Control in GitLabCVE-2024-5430Fix available6.8 Medium
- gitlabImproper Isolation or Compartmentalization in GitLabCVE-2024-6323Fix available7.5 High
- gitlabUncontrolled Resource Consumption in GitLabCVE-2024-5469Fix available3.1 Low
- gitlabUncontrolled Resource Consumption in GitLabCVE-2024-1736Fix available6.5 Medium
- gitlabUncontrolled Resource Consumption in GitLabCVE-2024-1495Fix available6.5 Medium
- gitlabUncontrolled Resource Consumption in GitLabCVE-2024-1963Fix available6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2024-4201Fix available4.4 Medium
- gitlabMissing Authorization in GitLabCVE-2024-5318Fix available4.0 Medium
- gitlabInefficient Regular Expression Complexity in GitLabCVE-2023-6502Fix available4.3 Medium
- gitlabCross-Site Request Forgery (CSRF) in GitLabCVE-2023-7045Fix available5.4 Medium
- gitlabImproper Handling of Highly Compressed Data (Data Amplification) in GitLabCVE-2024-1947Fix available4.3 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2024-5258Fix available4.4 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2024-2874Fix available6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2024-4835Fix available8.0 High
- gitlabInefficient Regular Expression Complexity in GitLabCVE-2023-6682Fix available6.5 Medium
- gitlabInefficient Regular Expression Complexity in GitLabCVE-2023-6688Fix available6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2024-2454Fix availableEPSS 33.3%6.5 Medium
- gitlabInefficient Regular Expression Complexity in GitLabCVE-2024-2651Fix availableEPSS 33.3%6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2024-4539Fix available4.3 Medium
- gitlabCross-Site Request Forgery (CSRF) in GitLabCVE-2024-4597Fix available5.7 Medium
- gitlabAuthentication Bypass by Assumed-Immutable Data in GitLabCVE-2024-4024Fix availableEPSS 14.9%7.3 High
- gitlabIncorrect Authorization in GitLabCVE-2024-4006Fix available4.3 Medium
- gitlabAuthentication Bypass by Spoofing in GitLabCVE-2024-1347Fix available4.3 Medium
- gitlabImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabCVE-2024-2434Fix availableEPSS 23.2%8.5 High
- gitlabInefficient Regular Expression Complexity in GitLabCVE-2024-2829Fix availableEPSS 26.0%7.5 High
- gitlabInefficient Regular Expression Complexity in GitLabCVE-2023-6489Fix available4.3 Medium
- gitlabInefficient Regular Expression Complexity in GitLabCVE-2023-6678Fix available4.3 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2024-2279Fix available8.7 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2024-3092Fix available8.7 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2023-6371Fix available8.7 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2024-2818Fix available4.3 Medium
- gitlabIncorrect Authorization in GitLabCVE-2024-0199Fix available7.7 High
- gitlabPrivilege Chaining in GitLabCVE-2024-1299Fix available6.5 Medium
- gitlabMissing Authorization in GitLabCVE-2023-4895Fix available4.3 Medium
- gitlabIncorrect Privilege Assignment in GitLabCVE-2023-6477Fix available6.7 Medium
- gitlabImproper Enforcement of Behavioral Workflow in GitLabCVE-2024-0410Fix available7.7 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2024-1451Fix availableEPSS 51.5%8.7 High
- gitlabAuthentication Bypass Using an Alternate Path or Channel in GitLabCVE-2024-1525Fix available5.3 Medium
- gitlabDirect Request ('Forced Browsing') in GitLabCVE-2024-0861Fix available4.3 Medium
- Show moreLoading…