GitLab

Records1525All Threatist records

Exploited (KEV)6In CISA KEV

CVSS critical86CVSS 9.0–10.0

CVSS high437CVSS 7.0–8.9

Exploited now

GitLab records in CISA KEV

TI-2026-71508 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability CRITICAL 100KEV 2026-10-29 TI-2026-58817 GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability CRITICAL 100KEV 2026-09-11 TI-2021-05161 GitLab Server-Side Request Forgery (SSRF) Vulnerability CRITICAL 100KEV 2026-02-18 TI-2021-17165 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability CRITICAL 90KEV 2026-02-03 TI-2023-06425 GitLab Community and Enterprise Editions Improper Access Control Vulnerability CRITICAL 100KEV 2024-05-01 TI-2021-05191 GitLab Community and Enterprise Editions Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Gitlab 1507 records CRITICAL Gitlab-shell 5 records MEDIUM Dynamic Application Security Testing Analyzer 4 records MEDIUM Runner 3 records MEDIUM Gitlab-vscode-extension 2 records MEDIUM Dast Api Scanner 1 record MEDIUM Gitaly 1 record LOW Gitlab Runner 1 record LOW

Records

1 record in Gitaly · all components

TI-2020-10477 CVE-2020-13353 · GHSA-mmmm-chjf-jmvw

Insufficient session expiration in GitLab Gitaly

LOW 15

When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above.

CVSS 3.1LOW 3.2 Local High privileges No interaction EPSS 0.00277 Published 2020-11-17 Fixed in 13.3.9, 13.4.5 +1 CWE-613

Open these records in search →