Skip to content
OpenAdvisories

Package · Ubuntu

gitlab

924 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-97229 Exploited Public exploit EPSS 65%

    Integer Overflow or Wraparound in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server…

    GitLab GitLab gitlab ruby Web / CMS Debian Ubuntu Alpine
    KEV Oct 29, 2026
  • Critical 9.9
    CVE-2024-6678 Public exploit

    Authentication Bypass by Spoofing in GitLab

    An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, which allows an attacker to trigger a pipeline as an arbitrary user under certain ci…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 9.9
    CVE-2024-0402 Public exploit

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a worksp…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 10.0
    CVE-2023-7028 Exploited Public exploit EPSS 94%

    Weak Password Recovery Mechanism for Forgotten Password in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account passwor…

    GitLab GitLab gitlab Web / CMS Ubuntu
    KEV May 1, 2024
  • Critical 10.0
    CVE-2023-2825 Public exploit EPSS 72%

    An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 9.9
    CVE-2022-2992 Public exploit EPSS 86%

    A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allow…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 9.9
    CVE-2022-2884 Public exploit EPSS 76%

    A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 9.1
    CVE-2022-1162 Public exploit EPSS 76%

    A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab CE/E…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 10.0
    CVE-2021-22205 Exploited · Ransomware Public exploit EPSS 100%

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validat…

    GitLab GitLab gitlab Web / CMS Ubuntu
    KEV Nov 3, 2021
  • Critical 9.6
    CVE-2021-22201 Public exploit

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 9.9
    CVE-2021-22192 Public exploit EPSS 13%

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authentica…

    GitLab GitLab gitlab Web / CMS Ubuntu