Read the docs

GitLab

Records1525All Threatist records
Exploited (KEV)6In CISA KEV
CVSS critical86CVSS 9.0–10.0
CVSS high437CVSS 7.0–8.9

Exploited now

GitLab records in CISA KEV
TI-2026-71508 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability Priority CRITICAL 100KEV 2026-10-29TI-2026-58817 GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-09-11TI-2021-05161 GitLab Server-Side Request Forgery (SSRF) Vulnerability Priority CRITICAL 100KEV 2026-02-18TI-2021-17165 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability Priority CRITICAL 90KEV 2026-02-03TI-2023-06425 GitLab Community and Enterprise Editions Improper Access Control Vulnerability Priority CRITICAL 100KEV 2024-05-01TI-2021-05191 GitLab Community and Enterprise Editions Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Gitlab 1507 records CRITICAL Gitlab-shell 5 records MEDIUM Dynamic Application Security Testing Analyzer 4 records MEDIUM Runner 3 records MEDIUM Gitlab-vscode-extension 2 records MEDIUM Dast Api Scanner 1 record MEDIUM Gitaly 1 record LOW Gitlab Runner 1 record LOW

Records

1 record in Dast Api Scanner · all components

TI-2022-03850 CVE-2022-4206 · GHSA-q474-j5v6-f4jg

Information disclosure in GitLab DAST API scanner

Priority MEDIUM 62

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00636 Published 2023-02-01 Fixed in 2.0.102 CWE-200
Open these records in search →