Vendor
GitLab
1,178 known vulnerabilities.
Products
GitLab 1,112
GitLab CE/EE 22
GitLab Community and Enterprise Editions 13
GitLab EE 10
GitLab Runner 6
GitLab AI Gateway 4
DAST 2
gitlab-vscode-extension 2
GitLab Community Edition 2
GitLab Enterprise Edition 2
gitlab-shell 2
GitLab DAST API scanner 1
GitLab Language Server 1
GitLab Pages 1
GitLab Community Edition and GitLab Enterprise Edition 1
GitLab VSCode Fork 1
Gitaly 1
DAST API scanner 1
Community Edition and Enterprise Edition 0
Community Edition, Enterprise Edition 0
Enterprise Edition 0
704 results · Clear filters · Feed
-
Medium 5.3
An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Pri…
-
Medium 4.7
An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLa…
-
Medium 5.4
A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1. GitLab was vulner…
-
Medium 4.3
In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of …
-
Medium 5.9
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 a…
-
Medium 4.2
An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting f…
-
Medium 6.5
Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14.5.4, all versions star…
-
Medium 6.5
An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 befo…
-
Medium 4.3
An authorization logic error in the External Status Check API in GitLab EE affecting all versions starting from 14.1 be…
-
Medium 4.3
In all versions of GitLab CE/EE since version 12.0, a lower privileged user can import users from projects that they do…
-
Medium 4.3
A denial of service vulnerability in GitLab CE/EE affecting all versions starting from 12.0 before 14.3.6, all versions…
-
Medium 6.5
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 a…
-
Medium 4.3
An issue has been discovered in GitLab affecting all versions starting from 12.0 before 14.4.5, all versions starting f…
-
Medium 4.3
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 a…
-
Medium 6.5
An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.4.5, all versions starting …
-
Medium 6.5
An issue has been discovered in GitLab affecting all versions starting from 13.10 before 14.4.5, all versions starting …
-
Medium 5.3
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was…
-
Medium 4.3
Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and …
-
Medium 6.5
An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before 14…
-
Medium 6.8
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions star…
KEV Feb 3, 2026 -
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions star…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions star…
-
Medium 4.3
Improper access control allows any project member to retrieve the service desk email address in GitLab CE/EE versions s…
-
Medium 4.3
Lack of an access control check in the External Status Check feature allowed any authenticated user to retrieve the con…
-
Medium 4.4
In all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all…
-
Medium 5.3
Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.3.6, all versions sta…
-
Medium 5.9
A collision in access memoization logic in all versions of GitLab CE/EE before 14.3.6, all versions starting from 14.4 …
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14.3.6, all versions star…
-
Medium 6.2
Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's enc…
-
Medium 4.3
An information disclosure vulnerability in the GitLab CE/EE API since version 8.9.6 allows a user to see basic informat…
-
Medium 5.3
A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data fro…
-
Medium 4.3
An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 1…
-
Medium 6.0
In all versions of GitLab CE/EE since version 8.0, an attacker can set the pipeline schedules to be active in a project…
-
Medium 4.4
Accidental logging of system root password in the migration log in all versions of GitLab CE/EE before 14.2.6, all vers…
-
Medium 5.3
A potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a malformed TIFF images …
-
Medium 5.3
Lack of email address ownership verification in the CODEOWNERS feature in all versions of GitLab EE starting from 11.3 …
-
Medium 6.5
In all versions of GitLab CE/EE since version 13.0, a privileged user, through an API call, can change the visibility l…
-
Medium 4.3
Incorrect Authorization in GitLab CE/EE 13.4 or above allows a user with guest membership in a project to modify the se…