Vendor
GitLab
1,178 known vulnerabilities.
Products
GitLab 1,112
GitLab CE/EE 22
GitLab Community and Enterprise Editions 13
GitLab EE 10
GitLab Runner 6
GitLab AI Gateway 4
DAST 2
gitlab-vscode-extension 2
GitLab Community Edition 2
GitLab Enterprise Edition 2
gitlab-shell 2
GitLab DAST API scanner 1
GitLab Language Server 1
GitLab Pages 1
GitLab Community Edition and GitLab Enterprise Edition 1
GitLab VSCode Fork 1
Gitaly 1
DAST API scanner 1
Community Edition and Enterprise Edition 0
Community Edition, Enterprise Edition 0
Enterprise Edition 0
704 results · Clear filters · Feed
-
Medium 6.5
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions star…
-
Medium 5.3
An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions startin…
-
Medium 4.3
A Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all versions from 1.0.2 prior to 14.10.5…
-
Medium 5.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 14.10.5, all versions sta…
-
Medium 5.3
Information exposure in GitLab EE affecting all versions from 12.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 pri…
-
Medium 6.5
Incorrect authorization in GitLab EE affecting all versions from 10.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 …
-
Medium 5.0
An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4…
-
Medium 4.3
An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior t…
-
Medium 4.7
An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4,…
-
Medium 5.4
When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all ve…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions star…
-
Medium 6.5
Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 b…
-
Medium 6.5
Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 b…
-
Medium 5.3
In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.…
-
Medium 5.4
Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.…
-
Medium 4.3
Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions starting from 1.0.2 befo…
-
Medium 4.3
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all version…
-
Medium 6.5
An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting f…
-
Medium 6.1
An issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6, all versions starting fr…
-
Medium 6.5
Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 pr…
-
Medium 4.3
An issue has been discovered in GitLab affecting all versions before 14.8.6, all versions starting from 14.9 before 14.…
-
Medium 5.3
Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions from 11.0 prior to 14.8…
-
Medium 4.3
It was possible to disclose details of confidential notes created via the API in Gitlab CE/EE affecting all versions fr…
-
Medium 4.3
Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting …
-
Medium 4.3
An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting …
-
Medium 4.9
An issue has been discovered in GitLab affecting all versions starting from 11.9 before 14.5.4, all versions starting f…
-
Medium 4.3
Improper access control in GitLab CE/EE versions 10.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 a…
-
Medium 5.3
Improper authorization in GitLab Pages included with GitLab CE/EE affecting all versions from 11.5 prior to 14.7.7, 14.…
-
Medium 5.3
A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to 14.…
-
Medium 6.5
A denial of service vulnerability when rendering RDoc files in GitLab CE/EE versions 10 to 14.7.7, 14.8.0 to 14.8.5, an…
-
Medium 4.8
Missing filtering in an error message in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and…
-
Medium 4.3
A potential DoS vulnerability was discovered in Gitlab CE/EE versions 13.7 before 14.7.7, all versions starting from 14…
-
Medium 4.3
An improper access control vulnerability in GitLab CE/EE affecting all versions from 13.11 prior to 14.7.7, 14.8 prior …
-
Medium 4.3
Adding a very large number of tags to a runner in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14…
-
Medium 4.3
A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1 prior to 14.7.7, 14.8.0 p…
-
Medium 5.8
Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal en…
-
Medium 5.4
A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 al…
-
Medium 6.5
In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6, all versions starting from 14.3 before 14.3.4, and a…
-
Medium 4.3
Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-…
-
Medium 4.3
Improper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1 allowed for project…