Vendor
GitLab
1,178 known vulnerabilities.
Products
GitLab 1,112
GitLab CE/EE 22
GitLab Community and Enterprise Editions 13
GitLab EE 10
GitLab Runner 6
GitLab AI Gateway 4
DAST 2
gitlab-vscode-extension 2
GitLab Community Edition 2
GitLab Enterprise Edition 2
gitlab-shell 2
GitLab DAST API scanner 1
GitLab Language Server 1
GitLab Pages 1
GitLab Community Edition and GitLab Enterprise Edition 1
GitLab VSCode Fork 1
Gitaly 1
DAST API scanner 1
Community Edition and Enterprise Edition 0
Community Edition, Enterprise Edition 0
Enterprise Edition 0
704 results · Clear filters · Feed
-
Medium 4.3
An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to read project details
-
Medium 4.7
Insufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to exploit a stored cross…
-
Medium 4.9
Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability …
-
Medium 6.1
A reflected cross-site script vulnerability in GitLab before versions 13.11.6, 13.12.6 and 14.0.2 allowed an attacker t…
-
Medium 6.1
Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feat…
-
Medium 6.5
An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 1…
-
Medium 6.5
Under certain conditions, some users were able to push to protected branches that were restricted to deploy keys in Git…
-
Medium 5.9
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8. Under a special condition it wa…
-
Medium 6.8
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab a…
KEV Feb 18, 2026 -
Medium 6.5
A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker…
-
Medium 6.1
An issue has been discovered in GitLab affecting all versions starting with 13.10. GitLab was vulnerable to a stored XS…
-
Medium 6.5
An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions startin…
-
Medium 4.4
All versions of GitLab CE/EE starting from 9.5 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all…
-
Medium 6.5
A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker…
-
Medium 6.8
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab C…
-
Medium 4.3
An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check co…
-
Medium 6.8CVE-2021-22206 Public exploit
An issue has been discovered in GitLab affecting all versions starting from 11.6. Pull mirror credentials are exposed t…
-
Medium 5.3CVE-2021-22210 Public exploit
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2. When querying the repository br…
-
Medium 5.9
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it wa…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user …
-
Medium 6.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4. It was possible to exploit a st…
-
Medium 4.3
Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike…
-
Medium 6.2
An information disclosure issue in GitLab starting from version 12.8 allowed a user with access to the server logs to s…
-
Medium 4.3
An issue has been discovered in GitLab affecting all versions starting from 13.4. Improper access control allows unauth…
-
Medium 5.7
In all versions of GitLab, marshalled session keys were being stored in Redis.
-
Medium 4.3
Improper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data that should be inacces…
-
Medium 4.3
An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages.
-
Medium 5.0
An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack …
-
Medium 5.4
A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbo…
-
Medium 4.3
An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demot…
-
Medium 4.9
An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables wh…
-
Medium 5.4
Insufficient input sanitization in wikis in GitLab version 13.8 and up allows an attacker to exploit a stored cross-sit…
-
Medium 4.1
An issue has been discovered in GitLab affecting all versions starting with 11.8. GitLab was vulnerable to a stored XSS…
-
Medium 5.9
Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the…
-
Medium 5.3
An issue has been discovered in GitLab affecting all versions starting with 13.0. Confidential issue titles in Gitlab w…
-
Medium 4.3
An issue has been discovered in GitLab affecting all versions of Gitlab EE/CE before 13.6.7. A potential resource exhau…
-
Medium 4.3
An issue has been discovered in GitLab affecting all versions starting from 12.4. The regex used for package names is w…
-
Medium 5.3
An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed meth…
-
Medium 5.3
An issue has been discovered in GitLab affecting all versions starting from 12.1. Incorrect headers in specific project…
-
Medium 4.3
A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting…