Skip to contentGitlab vulnerabilities
Newest
- gitlabImproper Removal of Sensitive Information Before Storage or Transfer in GitLabCVE-2026-1182Fix available4.3 Medium
- gitlabIncorrect Authorization in GitLabCVE-2025-12555Fix available4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-12576Fix available6.5 Medium
- gitlabImproper Encoding or Escaping of Output in GitLabCVE-2025-12697Fix available2.2 Low
- gitlabMissing Authorization in GitLabCVE-2025-12704Fix available3.5 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-13690Fix available6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-13929Fix available7.5 High
- gitlabImproper Validation of Specified Quantity in Input in GitLabCVE-2025-14513Fix available7.5 High
- gitlabAuthentication Bypass Using an Alternate Path or Channel in GitLabCVE-2026-0602Fix available4.3 Medium
- gitlabUncontrolled Recursion in GitLabCVE-2026-1069Fix available7.5 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-1090Fix available8.7 High
- gitlabUse of Incorrectly-Resolved Name or Reference in GitLabCVE-2026-1230Fix available4.1 Medium
- gitlabMissing Authorization in GitLabCVE-2026-1663Fix available4.3 Medium
- gitlabImproper Removal of Sensitive Information Before Storage or Transfer in GitLabCVE-2026-1732Fix available4.3 Medium
- gitlabImproper Neutralization of CRLF Sequences ('CRLF Injection') in GitLabCVE-2026-3848Fix available5.0 Medium
- gitlabImproper Validation of Specified Quantity in Input in GitLabCVE-2025-14511Fix available7.5 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-0752Fix available8.0 High
- gitlabInefficient Regular Expression Complexity in GitLabCVE-2026-1388Fix available7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2026-1662Fix available7.5 High
- gitlabAuthentication Bypass Using an Alternate Path or Channel in GitLabCVE-2026-1747Fix available4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2026-1725Fix available5.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2026-2845Fix available6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-3525Fix available6.5 Medium
- gitlabMissing Authorization in GitLabCVE-2025-14103Fix available4.3 Medium
- gitlabOrigin Validation Error in GitLabCVE-2025-7659Fix available8.0 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-8099Fix available7.5 High
- gitlabServer-Side Request Forgery (SSRF) in GitLabCVE-2025-12073Fix available4.3 Medium
- gitlabServer-Side Request Forgery (SSRF) in GitLabCVE-2025-125755.4 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-14560Fix available7.3 High
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2025-14594Fix available3.5 Low
- gitlabMissing Authorization in GitLabCVE-2025-14592Fix available3.7 Low
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-0595Fix available7.3 High
- gitlabInterpretation Conflict in GitLabCVE-2026-0958Fix available7.5 High
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2026-10804.3 Medium
- gitlabImproper Validation of Unsafe Equivalence in Input in GitLabCVE-2026-1094Fix available4.6 Medium
- gitlabImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLabCVE-2026-1282Fix available3.5 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2026-13876.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2026-1456Fix available6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2026-1458Fix available6.5 Medium
- gitlab ai gatewayImproper Neutralization of Special Elements Used in a Template Engine in GitLab AI GatewayCVE-2026-18689.9 Critical
- gitlabMissing Authorization in GitLabCVE-2026-1751Fix available3.1 Low
- gitlabIncorrect Authorization in GitLabCVE-2025-13928Fix available7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-13927Fix available7.5 High
- gitlabUnchecked Return Value in GitLabCVE-2026-0723Fix available7.4 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2026-1102Fix available5.3 Medium
- gitlabLoop with Unreachable Exit Condition ('Infinite Loop') in GitLabCVE-2025-13335Fix available6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-11224Fix available7.7 High
- gitlabExposure of Private Personal Information to an Unauthorized Actor in GitLabCVE-2025-3950Fix available3.5 Low
- gitlab, red hat openshift pipelines, openshift container platform 4 +2 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-9222Fix available8.7 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-10569Fix available6.5 Medium
- Show moreLoading…