Skip to contentGitlab vulnerabilities
Newest
- gitlabExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLabCVE-2025-1212Fix available4.3 Medium
- gitlabFiles or Directories Accessible to External Parties in GitLabCVE-2025-1042Fix available4.9 Medium
- gitlab, gitlab vscode fork +1 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab VSCode ForkCVE-2024-10383Fix available8.7 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-1072Fix available6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2024-2878Fix availableEPSS 23.4%7.5 High
- gitlabMissing Authorization in GitLabCVE-2024-3976Fix available6.5 Medium
- gitlabIncomplete Comparison with Missing Factors in GitLabCVE-2024-5528Fix available3.5 Low
- gitlabInefficient Algorithmic Complexity in GitLabCVE-2024-9631Fix available7.5 High
- gitlabIncorrect User Management in GitLabCVE-2024-6356Fix available4.4 Medium
- gitlabMissing Authorization in GitLabCVE-2024-1539Fix available4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2023-6386Fix available6.5 Medium
- gitlabServer-Side Request Forgery (SSRF) in GitLabCVE-2023-6195Fix available2.6 Low
- gitlabCross-Site Request Forgery (CSRF) in GitLabCVE-2024-1211Fix available6.4 Medium
- gitlabLoop with Unreachable Exit Condition ('Infinite Loop') in GitLabCVE-2025-0290Fix available4.3 Medium
- gitlabInsufficient Granularity of Access Control in GitLabCVE-2024-11931Fix available6.4 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-0314Fix available8.7 High
- gitlabIncorrect User Management in GitLabCVE-2024-13041Fix available4.2 Medium
- gitlabInefficient Algorithmic Complexity in GitLabCVE-2024-6324Fix available4.3 Medium
- gitlabMissing Authorization in GitLabCVE-2024-12431Fix available4.3 Medium
- gitlabInsertion of Sensitive Information into Externally-Accessible File or Directory in GitLabCVE-2025-0194Fix available6.5 Medium
- gitlabExposure of Sensitive Information Due to Incompatible Policies in GitLabCVE-2023-5117Fix available3.7 Low
- gitlabIncorrect Authorization in GitLabCVE-2024-8116Fix available5.3 Medium
- gitlabIncorrect Authorization in GitLabCVE-2024-8650Fix available5.3 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2024-8179Fix available5.4 Medium
- gitlabInefficient Algorithmic Complexity in GitLabCVE-2024-8233Fix available7.5 High
- gitlabImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabCVE-2024-8647Fix available5.4 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2024-9367Fix available4.3 Medium
- gitlabURL Redirection to Untrusted Site ('Open Redirect') in GitLabCVE-2024-9387Fix available6.4 Medium
- gitlabIncorrect Authorization in GitLabCVE-2024-10043Fix available3.1 Low
- gitlabURL Redirection to Untrusted Site ('Open Redirect') in GitLabCVE-2024-11274Fix available8.7 High
- gitlabPrivilege Context Switching Error in GitLabCVE-2024-12570Fix available6.7 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLabCVE-2024-12292Fix available4.0 Medium
- gitlabExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLabCVE-2024-10240Fix available5.3 Medium
- gitlabInefficient Algorithmic Complexity in GitLabCVE-2024-11828Fix available4.3 Medium
- gitlabIncorrect Authorization in GitLabCVE-2024-11669Fix available6.5 Medium
- gitlabMissing Authorization in GitLabCVE-2024-8114Fix available8.2 High
- gitlabInefficient Algorithmic Complexity in GitLabCVE-2024-8177Fix available5.3 Medium
- gitlabInefficient Algorithmic Complexity in GitLabCVE-2024-8237Fix available6.5 Medium
- gitlabInsufficient Session Expiration in GitLabCVE-2024-11668Fix available4.2 Medium
- gitlabIncorrect Ownership Assignment in GitLabCVE-2024-9633Fix available3.1 Low
- gitlabImproper Restriction of Rendered UI Layers or Frames in GitLabCVE-2024-7404Fix available6.8 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2024-8648Fix available6.1 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2024-8180Fix available5.4 Medium
- gitlabIncorrect Authorization in GitLabCVE-2024-9693Fix available8.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2024-6826Fix available6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2024-8312Fix available8.7 High
- gitlabIncorrect Authorization in GitLabCVE-2024-8970Fix available8.2 High
- gitlabIncorrect Provision of Specified Functionality in GitLabCVE-2024-5005Fix available4.3 Medium
- gitlabMissing Authentication for Critical Function in GitLabCVE-2024-9164Fix available9.6 Critical
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2024-6530Fix available7.3 High
- Show moreLoading…