Skip to content
OpenAdvisories

Vendor

GitLab

1,178 known vulnerabilities.

Products

GitLab 1,112 GitLab CE/EE 22 GitLab Community and Enterprise Editions 13 GitLab EE 10 GitLab Runner 6 GitLab AI Gateway 4 DAST 2 gitlab-vscode-extension 2 GitLab Community Edition 2 GitLab Enterprise Edition 2 gitlab-shell 2 GitLab DAST API scanner 1 GitLab Language Server 1 GitLab Pages 1 GitLab Community Edition and GitLab Enterprise Edition 1 GitLab VSCode Fork 1 Gitaly 1 DAST API scanner 1 Community Edition and Enterprise Edition 0 Community Edition, Enterprise Edition 0 Enterprise Edition 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-97229 Exploited Public exploit EPSS 65%

    Integer Overflow or Wraparound in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server…

    GitLab GitLab gitlab ruby Web / CMS Debian Ubuntu Alpine
    KEV Oct 29, 2026
  • Critical 10.0
    CVE-2026-85706 Exploited Public exploit EPSS 97%

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitra…

    GitLab GitLab Web / CMS
    KEV Sep 11, 2026
  • Critical 10.0
    CVE-2023-7028 Exploited Public exploit EPSS 94%

    Weak Password Recovery Mechanism for Forgotten Password in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account passwor…

    GitLab GitLab gitlab Web / CMS Ubuntu
    KEV May 1, 2024
  • Critical 10.0
    CVE-2021-22205 Exploited · Ransomware Public exploit EPSS 100%

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validat…

    GitLab GitLab gitlab Web / CMS Ubuntu
    KEV Nov 3, 2021