GitLab

Records1525All Threatist records

Exploited (KEV)6In CISA KEV

CVSS critical86CVSS 9.0–10.0

CVSS high437CVSS 7.0–8.9

Exploited now

GitLab records in CISA KEV

TI-2026-71508 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability CRITICAL 100KEV 2026-10-29 TI-2026-58817 GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability CRITICAL 100KEV 2026-09-11 TI-2021-05161 GitLab Server-Side Request Forgery (SSRF) Vulnerability CRITICAL 100KEV 2026-02-18 TI-2021-17165 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability CRITICAL 90KEV 2026-02-03 TI-2023-06425 GitLab Community and Enterprise Editions Improper Access Control Vulnerability CRITICAL 100KEV 2024-05-01 TI-2021-05191 GitLab Community and Enterprise Editions Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Gitlab 1507 records CRITICAL Gitlab-shell 5 records MEDIUM Dynamic Application Security Testing Analyzer 4 records MEDIUM Runner 3 records MEDIUM Gitlab-vscode-extension 2 records MEDIUM Dast Api Scanner 1 record MEDIUM Gitaly 1 record LOW Gitlab Runner 1 record LOW

Records

1 record in Gitlab Runner · all components

TI-2021-17177 CVE-2021-39947 · GHSA-hwx9-v7rw-v3qm

In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4…

LOW 34

In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the file descriptor 0 for multiple traces and mix the output of several jobs

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0087 Published 2022-06-06 Fixed in 14.3.4, 14.4.2 +1

Open these records in search →

Critical	86
High	437
Medium	929
Low	73
No CVSS	0