921 results · Feed
-
Medium 4.3
Improper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1 allowed for project…
-
Low 3.5
An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a D…
-
Medium 5.3
An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Pri…
-
Medium 4.7
An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLa…
-
Medium 5.4
A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1. GitLab was vulner…
-
Medium 4.3
In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of …
-
Low 3.5
An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trig…
-
Low 3.1
A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since r…
-
Low 3.1
An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting f…
-
Medium 5.9
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 a…
-
High 7.7
Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows …
-
Medium 4.2
An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting f…
-
Medium 6.5
Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14.5.4, all versions star…
-
Medium 6.5
An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 befo…
-
Critical 10.0CVE-2022-0735 EPSS 13%
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions sta…
-
Medium 4.3
In all versions of GitLab CE/EE since version 12.0, a lower privileged user can import users from projects that they do…
-
Medium 4.3
A denial of service vulnerability in GitLab CE/EE affecting all versions starting from 12.0 before 14.3.6, all versions…
-
High 8.7
Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allow…
-
Medium 6.5
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 a…
-
Low 3.5
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 a…
-
Medium 4.3
An issue has been discovered in GitLab affecting all versions starting from 12.0 before 14.4.5, all versions starting f…
-
High 7.5
An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting fr…
-
Medium 4.3
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 a…
-
High 8.6
An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5. Arbitrary file read was possibl…
-
Medium 6.5
An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.4.5, all versions starting …
-
Medium 6.5
An issue has been discovered in GitLab affecting all versions starting from 13.10 before 14.4.5, all versions starting …
-
Low 3.5
Server side request forgery protections in GitLab CE/EE versions between 8.4 and 14.4.4, between 14.5.0 and 14.5.2, and…
-
Medium 5.3
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was…
-
Medium 4.3
Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and …
-
Low 3.7
An information disclosure vulnerability in GitLab CE/EE versions 12.0 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 all…
-
Medium 6.8
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions star…
KEV Feb 3, 2026 -
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions star…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions star…
-
Medium 4.3
Improper access control allows any project member to retrieve the service desk email address in GitLab CE/EE versions s…
-
Medium 4.3
Lack of an access control check in the External Status Check feature allowed any authenticated user to retrieve the con…
-
Medium 4.4
In all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all…
-
Medium 5.3
Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.3.6, all versions sta…
-
Low 3.1
A vulnerable regular expression pattern in GitLab CE/EE since version 8.15 before 14.3.6, all versions starting from 14…