Skip to contentGitlab vulnerabilities
Newest
- gitlabGeneration of Incorrect Security Tokens in GitLabCVE-2026-15831Fix available4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2026-15975Fix available7.5 High
- gitlabInsufficiently Protected Credentials in GitLabCVE-2026-16553Fix available5.4 Medium
- gitlabUse of Incorrectly-Resolved Name or Reference in GitLabCVE-2025-12506Fix available3.5 Low
- gitlabIncorrect Authorization in GitLabCVE-2026-6352Fix available2.7 Low
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-6896Fix available8.7 High
- gitlabMissing Authorization in GitLabCVE-2026-7492Fix available4.3 Medium
- gitlabMissing Authorization in GitLabCVE-2026-8472Fix available4.3 Medium
- gitlabInsufficiently Protected Credentials in GitLabCVE-2026-11827Fix available4.9 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-13320Fix available7.3 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-10086Fix available8.7 High
- gitlabIncorrect Authorization in GitLabCVE-2026-0934Fix available3.8 Low
- gitlabImproper Control of Generation of Code ('Code Injection') in GitLabCVE-2026-1606Fix available4.3 Medium
- gitlabMissing Authorization in GitLabCVE-2026-2238Fix available5.3 Medium
- gitlabMissing Authorization in GitLabCVE-2026-3176Fix available3.1 Low
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2026-5309Fix available5.4 Medium
- gitlabIncorrect Authorization in GitLabCVE-2026-5796Fix available4.3 Medium
- gitlabIncorrect Authorization in GitLabCVE-2026-5952Fix available4.3 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLabCVE-2026-8330Fix available4.4 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-10712Fix available8.0 High
- gitlabIncorrect Authorization in GitLabCVE-2026-11379Fix available5.3 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLabCVE-2026-12053Fix available8.6 High
- gitlabReliance on Reverse DNS Resolution for a Security-Critical Action in GitLabCVE-2026-12635Fix available0.0 None
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2026-1500Fix available6.5 Medium
- gitlabIncorrect Authorization in GitLabCVE-2026-3553Fix available3.1 Low
- gitlabIncorrect Authorization in GitLabCVE-2026-6269Fix available5.4 Medium
- gitlabIncorrect Authorization in GitLabCVE-2026-6277Fix available4.3 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2026-6976Fix available3.7 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2026-7250Fix available7.5 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-8589Fix available7.3 High
- gitlabServer-Side Request Forgery (SSRF) in GitLabCVE-2026-9204Fix available5.3 Medium
- gitlabImproper Neutralization of Substitution Characters in GitLabCVE-2026-9694Fix available2.6 Low
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2026-10087Fix available8.7 High
- gitlabImproper Restriction of Rendered UI Layers or Frames in GitLabCVE-2026-10733Fix available4.3 Medium
- gitlabIncorrect Authorization in GitLabCVE-2026-9807Fix available4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2026-1402Fix available6.5 Medium
- gitlabMissing Authorization in GitLabCVE-2026-2601Fix available4.3 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2026-4868Fix available8.2 High
- gitlabMissing Authorization in GitLabCVE-2026-5296Fix available4.3 Medium
- gitlabIncorrect Authorization in GitLabCVE-2026-6713Fix available5.3 Medium
- gitlabUse of Incorrectly-Resolved Name or Reference in GitLabCVE-2026-8716Fix available4.3 Medium
- gitlabImproper Control of Generation of Code ('Code Injection') in GitLabCVE-2025-12669Fix available5.4 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2025-13874Fix available4.3 Medium
- gitlabImproper Validation of Specified Quantity in Input in GitLabCVE-2025-14869Fix available7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2025-14870Fix available7.5 High
- gitlabDeserialization of Untrusted Data in GitLabCVE-2026-1184Fix available6.5 Medium
- gitlabBusiness Logic Errors in GitLabCVE-2026-1322Fix available6.8 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2026-1338Fix available4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2026-1659Fix available7.5 High
- gitlabMissing Authorization in GitLabCVE-2026-2900Fix available2.7 Low
- Show moreLoading…