Read the docs

GitLab

Records1525All Threatist records
Exploited (KEV)6In CISA KEV
CVSS critical86CVSS 9.0–10.0
CVSS high437CVSS 7.0–8.9

Exploited now

GitLab records in CISA KEV
TI-2026-71508 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability Priority CRITICAL 100KEV 2026-10-29TI-2026-58817 GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-09-11TI-2021-05161 GitLab Server-Side Request Forgery (SSRF) Vulnerability Priority CRITICAL 100KEV 2026-02-18TI-2021-17165 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability Priority CRITICAL 90KEV 2026-02-03TI-2023-06425 GitLab Community and Enterprise Editions Improper Access Control Vulnerability Priority CRITICAL 100KEV 2024-05-01TI-2021-05191 GitLab Community and Enterprise Editions Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Gitlab 1507 records CRITICAL Gitlab-shell 5 records MEDIUM Dynamic Application Security Testing Analyzer 4 records MEDIUM Runner 3 records MEDIUM Gitlab-vscode-extension 2 records MEDIUM Dast Api Scanner 1 record MEDIUM Gitaly 1 record LOW Gitlab Runner 1 record LOW

Records

5 records in Gitlab-shell · all components

TI-2013-03939 CVE-2013-4490 · GHSA-9hhr-gwc7-jcvh

The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in…

Priority MEDIUM 57

The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands via shell metacharact…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.42139 Published 2014-05-13 No fix listed
TI-2013-04028 CVE-2013-4583 · GHSA-r692-jg36-6v4p

Improper privilege management in GitLab

Priority MEDIUM 42

The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to gain privil…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02 Published 2020-01-28 Fixed in 5.4.2, 6.2.4 +2 CWE-269
TI-2013-04027 CVE-2013-4582 · GHSA-wpgv-98gg-67q7

The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions…

Priority LOW 33

The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-s…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01938 Published 2020-01-28 Fixed in 5.4.2, 6.2.4 +2 CWE-829
Open these records in search →