Skip to content
OpenAdvisories

Vendor

GitLab

1,178 known vulnerabilities.

Products

GitLab 1,112 GitLab CE/EE 22 GitLab Community and Enterprise Editions 13 GitLab EE 10 GitLab Runner 6 GitLab AI Gateway 4 DAST 2 gitlab-vscode-extension 2 GitLab Community Edition 2 GitLab Enterprise Edition 2 gitlab-shell 2 GitLab DAST API scanner 1 GitLab Language Server 1 GitLab Pages 1 GitLab Community Edition and GitLab Enterprise Edition 1 GitLab VSCode Fork 1 Gitaly 1 DAST API scanner 1 Community Edition and Enterprise Edition 0 Community Edition, Enterprise Edition 0 Enterprise Edition 0
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-110264 Public exploit

    Integer Overflow or Wraparound in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could hav…

    GitLab GitLab ruby ruby3.1 Web / CMS Debian Alpine
  • Critical 10.0
    CVE-2026-97229 Exploited Public exploit EPSS 65%

    Integer Overflow or Wraparound in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server…

    GitLab GitLab gitlab ruby Web / CMS Debian Ubuntu Alpine
    KEV Oct 29, 2026
  • Critical 9.9
    CVE-2026-90970 Public exploit EPSS 17%

    Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway

    GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user wi…

    GitLab GitLab AI Gateway Web / CMS
  • Critical 10.0
    CVE-2026-85706 Exploited Public exploit EPSS 97%

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitra…

    GitLab GitLab Web / CMS
    KEV Sep 11, 2026
  • Critical 9.4
    CVE-2026-19478 Public exploit

    Improper Control of Generation of Code ('Code Injection') in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete publ…

    GitLab GitLab Web / CMS
  • Critical 9.9
    CVE-2024-6678 Public exploit

    Authentication Bypass by Spoofing in GitLab

    An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, which allows an attacker to trigger a pipeline as an arbitrary user under certain ci…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 9.9
    CVE-2024-0402 Public exploit

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a worksp…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 10.0
    CVE-2023-7028 Exploited Public exploit EPSS 94%

    Weak Password Recovery Mechanism for Forgotten Password in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account passwor…

    GitLab GitLab gitlab Web / CMS Ubuntu
    KEV May 1, 2024
  • Critical 10.0
    CVE-2023-2825 Public exploit EPSS 72%

    An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 9.9
    CVE-2022-2992 Public exploit EPSS 86%

    A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allow…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 9.9
    CVE-2022-2884 Public exploit EPSS 76%

    A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 9.9
    CVE-2022-2185 Public exploit EPSS 77%

    A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior t…

    GitLab GitLab Web / CMS
  • Critical 9.1
    CVE-2022-1162 Public exploit EPSS 76%

    A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab CE/E…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 10.0
    CVE-2021-22205 Exploited · Ransomware Public exploit EPSS 100%

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validat…

    GitLab GitLab gitlab Web / CMS Ubuntu
    KEV Nov 3, 2021
  • Critical 9.6
    CVE-2021-22201 Public exploit

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 9.9
    CVE-2021-22192 Public exploit EPSS 13%

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authentica…

    GitLab GitLab gitlab Web / CMS Ubuntu