Read the docs

GitLab

Records1525All Threatist records
Exploited (KEV)6In CISA KEV
CVSS critical86CVSS 9.0–10.0
CVSS high437CVSS 7.0–8.9

Exploited now

GitLab records in CISA KEV
TI-2026-71508 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability Priority CRITICAL 100KEV 2026-10-29TI-2026-58817 GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-09-11TI-2021-05161 GitLab Server-Side Request Forgery (SSRF) Vulnerability Priority CRITICAL 100KEV 2026-02-18TI-2021-17165 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability Priority CRITICAL 90KEV 2026-02-03TI-2023-06425 GitLab Community and Enterprise Editions Improper Access Control Vulnerability Priority CRITICAL 100KEV 2024-05-01TI-2021-05191 GitLab Community and Enterprise Editions Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Gitlab 1507 records CRITICAL Gitlab-shell 5 records MEDIUM Dynamic Application Security Testing Analyzer 4 records MEDIUM Runner 3 records MEDIUM Gitlab-vscode-extension 2 records MEDIUM Dast Api Scanner 1 record MEDIUM Gitaly 1 record LOW Gitlab Runner 1 record LOW

Records

2 records in Gitlab-vscode-extension · all components

Open these records in search →