921 results · Feed
-
Medium 4.3
An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to read project details
-
High 7.1
A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6…
-
Medium 4.7
Insufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to exploit a stored cross…
-
Medium 4.9
Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability …
-
Medium 6.1
A reflected cross-site script vulnerability in GitLab before versions 13.11.6, 13.12.6 and 14.0.2 allowed an attacker t…
-
Low 3.5
A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows attacker to reject acces…
-
Medium 6.1
Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feat…
-
Medium 6.5
An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 1…
-
Medium 6.5
Under certain conditions, some users were able to push to protected branches that were restricted to deploy keys in Git…
-
Low 3.5
HTML injection was possible via the full name field before versions 13.11.6, 13.12.6, and 14.0.2 in GitLab CE
-
Medium 5.9
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8. Under a special condition it wa…
-
High 7.7
A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an attacker to create a recu…
-
Medium 6.8
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab a…
KEV Feb 18, 2026 -
Medium 6.5
A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker…
-
Medium 6.5
An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions startin…
-
Medium 4.4
All versions of GitLab CE/EE starting from 9.5 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all…
-
Medium 6.5
A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker…
-
High 8.8
A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to lea…
-
Medium 6.8
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab C…
-
High 7.5
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.8. GitLab was not properly validat…
-
Medium 4.3
An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check co…
-
Medium 6.8CVE-2021-22206 Public exploit
An issue has been discovered in GitLab affecting all versions starting from 11.6. Pull mirror credentials are exposed t…
-
Medium 5.3CVE-2021-22210 Public exploit
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2. When querying the repository br…
-
Low 3.1
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7. GitLab Dependency Proxy, under …
-
Critical 10.0
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validat…
KEV Nov 3, 2021 -
Low 3.5
An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS…
-
High 8.5
A path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT …
-
Low 2.4
An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possibl…
-
Medium 5.9
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it wa…
-
Low 3.5
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist whe…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user …
-
Critical 9.6CVE-2021-22201 Public exploit
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file…
-
High 7.5
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions st…
-
Medium 6.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4. It was possible to exploit a st…
-
Medium 4.3
Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike…
-
Medium 4.3
An issue has been discovered in GitLab affecting all versions starting from 13.4. Improper access control allows unauth…
-
Medium 4.3
Improper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data that should be inacces…
-
Medium 4.3
An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages.
-
Medium 5.0
An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack …
-
Low 3.5
An issue has been discovered in GitLab affecting all versions starting with 7.1. A member of a private group was able t…