Vendor
GitLab
1,178 known vulnerabilities.
Products
GitLab 1,112
GitLab CE/EE 22
GitLab Community and Enterprise Editions 13
GitLab EE 10
GitLab Runner 6
GitLab AI Gateway 4
DAST 2
gitlab-vscode-extension 2
GitLab Community Edition 2
GitLab Enterprise Edition 2
gitlab-shell 2
GitLab DAST API scanner 1
GitLab Language Server 1
GitLab Pages 1
GitLab Community Edition and GitLab Enterprise Edition 1
GitLab VSCode Fork 1
Gitaly 1
DAST API scanner 1
Community Edition and Enterprise Edition 0
Community Edition, Enterprise Edition 0
Enterprise Edition 0
1,178 results · Feed
-
Low 3.1
An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 prior to 14.10.5, 15.0 prior to 15.0.4, a…
-
Low 2.7
An issue has been discovered in GitLab EE affecting all versions starting from 12.2 prior to 14.10.5, 15.0 prior to 15.…
-
Medium 6.5
Incorrect authorization in GitLab EE affecting all versions from 10.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 …
-
High 8.1CVE-2022-2230 EPSS 58%
A Stored Cross-Site Scripting vulnerability in the project settings page in GitLab CE/EE affecting all versions from 14…
-
Low 3.1
Improper access control in the runner jobs API in GitLab CE/EE affecting all versions prior to 14.10.5, 15.0 prior to 1…
-
Medium 5.0
An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4…
-
High 8.7
Insufficient sanitization in GitLab EE's external issue tracker affecting all versions from 14.5 prior to 14.10.5, 15.0…
-
Critical 9.9
A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior t…
-
Low 2.6
An information disclosure vulnerability in GitLab EE affecting all versions from 12.5 prior to 14.10.5, 15.0 prior to 1…
-
Medium 4.3
An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior t…
-
Medium 4.7
An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4,…
-
Critical 9.9CVE-2022-1680 EPSS 16%
An account takeover issue has been discovered in GitLab EE affecting all versions starting from 11.10 before 14.9.5, al…
-
Low 2.7
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 14.9.5, all versions star…
-
Medium 5.4
When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all ve…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions star…
-
Medium 6.5
Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 b…
-
High 7.7
A Stored Cross-Site Scripting vulnerability in Jira integration in GitLab EE affecting all versions from 13.11 prior to…
-
Medium 6.5
Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 b…
-
Medium 5.3
In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.…
-
High 7.1
Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before …
-
Medium 5.4
Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.…
-
Medium 4.3
Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions starting from 1.0.2 befo…
-
Medium 4.3
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all version…
-
Medium 6.5
An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting f…
-
Medium 6.1
An issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6, all versions starting fr…
-
Medium 6.5
Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 pr…
-
Medium 4.3
An issue has been discovered in GitLab affecting all versions before 14.8.6, all versions starting from 14.9 before 14.…
-
Low 2.0
An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting f…
-
Medium 5.3
Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions from 11.0 prior to 14.8…
-
Low 2.6
An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting f…
-
Medium 4.3
It was possible to disclose details of confidential notes created via the API in Gitlab CE/EE affecting all versions fr…
-
Medium 4.3
Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting …
-
Medium 4.3
An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting …
-
Medium 4.9
An issue has been discovered in GitLab affecting all versions starting from 11.9 before 14.5.4, all versions starting f…
-
Low 2.6
Missing sanitization of logged exception messages in all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior…
-
Medium 4.3
Improper access control in GitLab CE/EE versions 10.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 a…
-
High 8.7CVE-2022-1190 EPSS 88%
Improper handling of user input in GitLab CE/EE versions 8.3 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 1…
-
High 8.7
Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 befo…
-
Critical 9.1
A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab CE/E…
-
Medium 5.3
Improper authorization in GitLab Pages included with GitLab CE/EE affecting all versions from 11.5 prior to 14.7.7, 14.…