Skip to contentGitlab vulnerabilities
Newest
- gitlabImproper Validation of Specified Quantity in Input in GitLabCVE-2025-2256Fix available7.5 High
- gitlabServer-Side Request Forgery (SSRF) in GitLabCVE-2025-6454Fix available8.5 High
- gitlabExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLabCVE-2025-6769Fix available4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-7337Fix available6.5 Medium
- gitlabImproper Validation of Specified Quantity in Input in GitLabCVE-2025-10094Fix available6.5 Medium
- gitlabMissing Authorization in GitLabCVE-2025-2246Fix available5.8 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-3601Fix available6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-4225Fix available5.3 Medium
- gitlabImproper Control of Generation of Code ('Code Injection') in GitLabCVE-2025-5101Fix available5.0 Medium
- gitlabIncorrect Authorization in GitLabCVE-2024-10219Fix available6.5 Medium
- gitlabIncorrect Privilege Assignment in GitLabCVE-2024-12303Fix available6.7 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-1477Fix available6.5 Medium
- gitlabInsufficient Granularity of Access Control in GitLabCVE-2025-2498Fix available3.1 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-2614Fix available6.5 Medium
- gitlabInefficient Regular Expression Complexity in GitLabCVE-2025-2937Fix available6.5 Medium
- gitlabIncorrect Permission Assignment for Critical Resource in GitLabCVE-2025-5819Fix available5.0 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-6186Fix available8.7 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-7739Fix available8.7 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-7734Fix available8.7 High
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2025-8770Fix available6.5 Medium
- gitlab language serverMissing Authentication for Critical Function in GitLab Language ServerCVE-2025-82798.7 High
- gitlabIncorrect Authorization in GitLabCVE-2025-0765Fix available4.3 Medium
- gitlabMissing Authorization in GitLabCVE-2025-1299Fix available4.3 Medium
- gitlabExposure of Sensitive Information Due to Incompatible Policies in GitLabCVE-2025-4976Fix available4.3 Medium
- gitlabInsufficient Granularity of Access Control in GitLabCVE-2025-7001Fix available4.3 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-4439Fix available7.7 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-4700Fix available8.7 High
- gitlabIncorrect Authorization in GitLabCVE-2025-3396Fix available4.3 Medium
- gitlabIncorrect Authorization in GitLabCVE-2025-49722.7 Low
- gitlabIncorrect Authorization in GitLabCVE-2025-61682.7 Low
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-6948Fix available8.7 High
- gitlabMissing Authentication for Critical Function in GitLabCVE-2025-1754Fix available5.3 Medium
- gitlabBusiness Logic Errors in GitLabCVE-2025-2938Fix available3.1 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-3279Fix available6.5 Medium
- gitlabMissing Authorization in GitLabCVE-2025-5315Fix available4.3 Medium
- gitlabMissing Authorization in GitLabCVE-2025-5846Fix available2.7 Low
- gitlabMissing Authorization in GitLabCVE-2023-5600Fix available3.1 Low
- gitlabCross-Site Request Forgery (CSRF) in GitLabCVE-2024-4994Fix available8.1 High
- gitlabInefficient Regular Expression Complexity in GitLabCVE-2024-4025Fix available6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-2443Fix available8.7 High
- gitlabMissing Authorization in GitLabCVE-2025-5121Fix availableEPSS 12.4%8.5 High
- gitlabInsertion of Sensitive Information into Log File in GitLabCVE-2024-7586Fix available4.1 Medium
- gitlabInsufficient Granularity of Access Control in GitLabCVE-2025-5982Fix available3.7 Low
- gitlabTime-of-check Time-of-use (TOCTOU) Race Condition in GitLabCVE-2024-9512Fix available5.3 Medium
- gitlabLoop with Unreachable Exit Condition ('Infinite Loop') in GitLabCVE-2025-0673Fix available7.5 High
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2025-5195Fix available4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-1478Fix available6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-1516Fix available6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-2254Fix available8.7 High
- gitlabImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLabCVE-2025-4278Fix availableEPSS 10.9%8.7 High
- Show moreLoading…