Skip to contentGitlab vulnerabilities
Newest
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2026-3073Fix available4.3 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2026-3074Fix available4.3 Medium
- gitlabUnintended Proxy or Intermediary ('Confused Deputy') in GitLabCVE-2026-3160Fix available5.8 Medium
- gitlabAccess Control Check Implemented After Asset is Accessed in GitLabCVE-2026-3607Fix available4.3 Medium
- gitlabAuthentication Bypass Using an Alternate Path or Channel in GitLabCVE-2026-4524Fix available6.5 Medium
- gitlabCross-Site Request Forgery (CSRF) in GitLabCVE-2026-4527Fix available6.5 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2026-6063Fix available4.3 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-6073Fix available8.7 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-6335Fix available5.4 Medium
- gitlabMissing Authorization in GitLabCVE-2026-6883Fix available2.6 Low
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-7377Fix available8.7 High
- gitlabServer-Side Request Forgery (SSRF) in GitLabCVE-2026-7471Fix available3.5 Low
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-7481Fix available8.7 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2026-8280Fix available6.5 Medium
- gitlabMissing Authorization in GitLabCVE-2026-8144Fix available4.3 Medium
- gitlabImproper Restriction of Rendered UI Layers or Frames in GitLabCVE-2026-3254Fix available3.5 Low
- gitlabCross-Site Request Forgery (CSRF) in GitLabCVE-2026-4922Fix available8.1 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-0186Fix available6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-3922Fix available6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-6016Fix available6.5 Medium
- gitlabIncorrect Authorization in GitLabCVE-2025-9957Fix available2.7 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2026-1660Fix available6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-5262Fix available8.0 High
- gitlabIncorrect Authorization in GitLabCVE-2026-5377Fix available4.3 Medium
- gitlabImproper Resolution of Path Equivalence in GitLabCVE-2026-5816Fix available8.0 High
- gitlabInsufficient Session Expiration in GitLabCVE-2026-6515Fix available5.4 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2026-4398Fix available5.4 Medium
- gitlabMissing Authorization in GitLabCVE-2025-9484Fix available4.3 Medium
- gitlabImproper Validation of Specified Quantity in Input in GitLabCVE-2025-12664Fix available7.5 High
- gitlabImproper Validation of Specified Quantity in Input in GitLabCVE-2026-1092Fix available7.5 High
- gitlabImproper Validation of Specified Quantity in Input in GitLabCVE-2026-1101Fix available6.5 Medium
- gitlabImproper Control of Generation of Code ('Code Injection') in GitLabCVE-2026-1516Fix available5.7 Medium
- gitlabIncorrect Authorization in GitLabCVE-2026-1752Fix available4.3 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2026-2104Fix available4.3 Medium
- gitlabIncorrect Authorization in GitLabCVE-2026-2619Fix available4.3 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-4332Fix available5.4 Medium
- gitlabMissing Authorization in GitLabCVE-2026-4916Fix available2.7 Low
- gitlabExposed Dangerous Method or Function in GitLabCVE-2026-5173Public exploitFix available8.5 High
- gitlab, red hat openshift pipelines, openshift container platform 4 +2 moreImproper Handling of Parameters in GitLabCVE-2026-2370Fix available8.1 High
- gitlabImproper Validation of Specified Quantity in Input in GitLabCVE-2025-13078Fix available6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-13436Fix available6.5 Medium
- gitlabMissing Authorization in GitLabCVE-2025-14595Fix available4.3 Medium
- gitlabMissing Authentication for Critical Function in GitLabCVE-2026-1724Fix available6.8 Medium
- gitlabAuthentication Bypass Using an Alternate Path or Channel in GitLabCVE-2026-2745Fix available6.8 Medium
- gitlabIncorrect Authorization in GitLabCVE-2026-2726Fix available4.3 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-2973Fix available5.4 Medium
- gitlabImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLabCVE-2026-2995Fix available7.7 High
- gitlabCross-Site Request Forgery (CSRF) in GitLabCVE-2026-3857Fix available8.1 High
- gitlabInefficient Algorithmic Complexity in GitLabCVE-2026-3988Fix available7.5 High
- gitlabIncorrect Authorization in GitLabCVE-2026-4363Fix available3.7 Low
- Show moreLoading…