GitLab

Records1525All Threatist records

Exploited (KEV)6In CISA KEV

CVSS critical86CVSS 9.0–10.0

CVSS high437CVSS 7.0–8.9

Exploited now

GitLab records in CISA KEV

TI-2026-71508 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability CRITICAL 100KEV 2026-10-29 TI-2026-58817 GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability CRITICAL 100KEV 2026-09-11 TI-2021-05161 GitLab Server-Side Request Forgery (SSRF) Vulnerability CRITICAL 100KEV 2026-02-18 TI-2021-17165 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability CRITICAL 90KEV 2026-02-03 TI-2023-06425 GitLab Community and Enterprise Editions Improper Access Control Vulnerability CRITICAL 100KEV 2024-05-01 TI-2021-05191 GitLab Community and Enterprise Editions Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Gitlab 1507 records CRITICAL Gitlab-shell 5 records MEDIUM Dynamic Application Security Testing Analyzer 4 records MEDIUM Runner 3 records MEDIUM Gitlab-vscode-extension 2 records MEDIUM Dast Api Scanner 1 record MEDIUM Gitaly 1 record LOW Gitlab Runner 1 record LOW

Records

3 records in Runner · all components

TI-2020-10420 CVE-2020-13295 · GHSA-83vw-qmcc-rxwg

Server-side request forgery in GitLab Runner

MEDIUM 40

For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01169 Published 2020-08-10 Fixed in 13.0.12, 13.1.6 +1 CWE-918

TI-2022-02076 CVE-2022-2251 · GHSA-cxfq-cc8j-j2pp

OS command injection in GitLab Runner

LOW 39

Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user who creates a branch with a specially crafted name and gets anot…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01177 Published 2023-01-17 Fixed in 15.3.5, 15.4.4 +1 CWE-78

TI-2020-10452 CVE-2020-13327 · GHSA-rjrm-vx9g-7gr2

An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0…

LOW 34

An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 before 13.3.7, all versions starting from 13.2.0 before 13.2.10.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00715 Published 2020-10-22 Fixed in 13.4.2, 13.3.7 +1

Open these records in search →

Critical	86
High	437
Medium	929
Low	73
No CVSS	0