Skip to contentGitlab vulnerabilities
Newest
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-5996Fix available6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-1763Fix available8.7 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2024-7803Fix available6.5 Medium
- gitlabUser Interface (UI) Misrepresentation of Critical Information in GitLabCVE-2024-9163Fix available3.5 Low
- gitlabImproper Validation of Consistency within Input in GitLabCVE-2024-12093Fix available6.8 Medium
- gitlabWeak Authentication in GitLabCVE-2025-0605Fix available4.6 Medium
- gitlabExposure of Private Personal Information to an Unauthorized Actor in GitLabCVE-2025-0679Fix available4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-0993Fix available7.5 High
- gitlabInsufficient Granularity of Access Control in GitLabCVE-2025-1110Fix available2.7 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-2853Fix available6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-3111Fix available6.5 Medium
- gitlabInsufficient Granularity of Access Control in GitLabCVE-2025-4979Fix available4.9 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2024-8973Fix available6.5 Medium
- gitlabAuthentication Bypass Using an Alternate Path or Channel in GitLabCVE-2025-0549Fix available6.8 Medium
- gitlabInsufficient Granularity of Access Control in GitLabCVE-2025-1278Fix available5.3 Medium
- gitlabMissing Authorization in GitLabCVE-2024-12244Fix available4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-0639Fix available6.5 Medium
- gitlabBusiness Logic Errors in GitLabCVE-2025-1908Fix available7.7 High
- gitlabImproper Restriction of Rendered UI Layers or Frames in GitLabCVE-2025-0362Fix available6.4 Medium
- gitlabDebug Messages Revealing Unnecessary Information in GitLabCVE-2025-2469Fix available3.7 Low
- gitlabGeneration of Error Message Containing Sensitive Information in GitLabCVE-2024-11129Fix available6.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-1677Fix available6.5 Medium
- gitlabInsufficient Granularity of Access Control in GitLabCVE-2025-2408Fix available5.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2024-10307Fix available4.3 Medium
- gitlabInsufficient Granularity of Access Control in GitLabCVE-2024-12619Fix available5.2 Medium
- gitlabImproper Control of Generation of Code ('Code Injection') in GitLabCVE-2025-2867Fix available4.4 Medium
- gitlabImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLabCVE-2024-9773Fix available3.7 Low
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-0811Fix available8.7 High
- gitlabIncorrect Authorization in GitLabCVE-2025-2242Fix available7.5 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-2255Fix available8.7 High
- gitlabIncorrect Authorization in GitLabCVE-2024-7296Fix available2.7 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-1257Fix available6.5 Medium
- gitlabImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLabCVE-2024-8402Fix available3.7 Low
- gitlabGeneration of Error Message Containing Sensitive Information in GitLabCVE-2024-12380Fix available4.4 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2024-13054Fix available6.5 Medium
- gitlabIncorrect Authorization in GitLabCVE-2025-0652Fix available4.3 Medium
- gitlabIncorrect Authorization in GitLabCVE-2025-20454.3 Medium
- gitlabIncorrect Authorization in GitLabCVE-2025-1540Fix available3.1 Low
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-0555Fix available7.7 High
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2024-10925Fix available5.3 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-0475Fix available8.7 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2024-8186Fix available5.4 Medium
- gitlabImproper Neutralization of Input Used for LLM Prompting in GitLabCVE-2024-3303Fix available6.4 Medium
- gitlabInsufficient Session Expiration in GitLabCVE-2025-1198Fix available4.2 Medium
- gitlabExecution with Unnecessary Privileges in GitLabCVE-2024-7102Fix available9.6 Critical
- gitlabExecution with Unnecessary Privileges in GitLabCVE-2024-8266Fix available4.4 Medium
- gitlabUnintended Proxy or Intermediary ('Confused Deputy') in GitLabCVE-2024-9870Fix available4.3 Medium
- gitlabIncorrect Authorization in GitLabCVE-2025-0516Fix available4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2024-12379Fix available6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-0376Fix available8.7 High
- Show moreLoading…