Skip to contentGitlab vulnerabilities
Newest
- gitlabInsufficient Granularity of Access Control in GitLabCVE-2025-11246Fix available5.4 Medium
- gitlab, red hat openshift pipelines, openshift container platform 4 +2 moreMissing Authorization in GitLabCVE-2025-13772Fix available7.1 High
- gitlab, red hat openshift pipelines, openshift container platform 4 +2 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-13761Fix available8.0 High
- gitlabMissing Authorization in GitLabCVE-2025-13781Fix available6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-12029Fix available8.0 High
- gitlabImproper Encoding or Escaping of Output in GitLabCVE-2025-12734Fix available3.5 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-4097Fix available6.5 Medium
- gitlabImproper Encoding or Escaping of Output in GitLabCVE-2025-8405Fix available7.7 High
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2025-11247Fix available4.3 Medium
- gitlabAuthentication Bypass Using an Alternate Path or Channel in GitLabCVE-2025-11984Fix available6.8 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-12562Fix available7.5 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-12716Fix available8.7 High
- gitlabGeneration of Error Message Containing Sensitive Information in GitLabCVE-2025-13978Fix available4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-14157Fix available6.5 Medium
- gitlabTime-of-check Time-of-use (TOCTOU) Race Condition in GitLabCVE-2024-9183Fix available7.7 High
- gitlabDirect Request ('Forced Browsing') in GitLabCVE-2025-6195Fix available4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-7449Fix available6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-12571Fix available7.5 High
- gitlabAuthentication Bypass by Spoofing in GitLabCVE-2025-12653Fix available6.5 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLabCVE-2025-13611Fix available2.0 Low
- gitlabMissing Authorization in GitLabCVE-2025-9825Fix available5.0 Medium
- gitlabMemory Allocation with Excessive Size Value in GitLabCVE-2025-12983Fix available3.5 Low
- gitlabInsertion of Sensitive Information Into Sent Data in GitLabCVE-2025-2615Fix available4.3 Medium
- gitlabImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLabCVE-2025-6945Fix available3.5 Low
- gitlabMissing Authorization in GitLabCVE-2025-6171Fix available5.3 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLabCVE-2025-7000Fix available4.3 Medium
- gitlabIncorrect Authorization in GitLabCVE-2025-7736Fix available3.1 Low
- gitlabIncorrect Authorization in GitLabCVE-2025-11865Fix available4.3 Medium
- gitlabImproper Handling of URL Encoding (Hex Encoding) in GitLabCVE-2025-11990Fix available3.1 Low
- gitlabMissing Authorization in GitLabCVE-2025-11702Fix available8.5 High
- gitlabBusiness Logic Errors in GitLabCVE-2025-6601Fix available2.7 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-10497Fix available7.5 High
- gitlabIncorrect Authorization in GitLabCVE-2025-11971Fix available6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-11974Fix available6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-11447Fix available7.5 High
- gitlabMissing Authorization in GitLabCVE-2025-11989Fix available3.7 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-10004Fix available7.5 High
- gitlabIncorrect Authorization in GitLabCVE-2025-11340Fix available7.7 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-2934Fix available4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-8014Fix available7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-11042Fix available4.3 Medium
- gitlabIncorrect Ownership Assignment in GitLabCVE-2025-5069Fix available3.5 Low
- gitlabBusiness Logic Errors in GitLabCVE-2025-10868Fix available3.5 Low
- gitlabPrivilege Defined With Unsafe Actions in GitLabCVE-2025-7691Fix available6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-9642Fix available8.7 High
- gitlabInsertion of Sensitive Information Into Sent Data in GitLabCVE-2025-9958Fix available7.7 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-10858Fix available7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-10867Fix available3.5 Low
- gitlabMissing Authorization in GitLabCVE-2025-10871Fix available3.8 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-1250Fix available6.5 Medium
- Show moreLoading…