Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1507 records

Priority MEDIUM 52

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 th…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01349 Published 2026-10-22 Partial fix · 18.11.13, 19.0.10 +5 CWE-190
Priority LOW 32

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with a re…

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00395 Published 2026-10-21 Fixed in 19.3.6, 19.4.3 +1 CWE-863
Priority LOW 28

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authenticated to read milestone metadata, including t…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00238 Published 2026-10-21 Fixed in 19.3.6, 19.4.3 +1 CWE-639
Priority LOW 15

GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a require…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.0026 Published 2026-10-21 Fixed in 19.3.6, 19.4.3 +1 CWE-706
Priority LOW 38

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAuth SAML and LDAP auto-linking were both enabled, an authenticated…

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.00543 Published 2026-10-21 Fixed in 19.3.6, 19.4.3 +1 CWE-90
Priority LOW 31

GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the instance-wide SAML or LDAP membership lock was enabled, an authenticat…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00261 Published 2026-10-21 Fixed in 19.3.6, 19.4.3 +1 CWE-863
TI-2026-79060 CVE-2026-103515 · GHSA-x828-vfgm-5mgh

Incorrect Authorization in GitLab

Priority LOW 13

GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an instance administrator locked a group's Duo availability, an authentica…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00232 Published 2026-10-21 Fixed in 19.3.6, 19.4.3 +1 CWE-863
Priority LOW 16

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue fro…

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00217 Published 2026-10-21 Fixed in 19.3.6, 19.4.3 +1 CWE-524
Priority LOW 29

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have retrieved sen…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00277 Published 2026-10-21 Fixed in 19.3.6, 19.4.3 +1 CWE-201
Priority LOW 19

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00126 Published 2026-10-21 Fixed in 19.3.6, 19.4.3 +1 CWE-348
Priority LOW 32

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have poisoned a shar…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.0019 Published 2026-10-21 Fixed in 19.3.6, 19.4.3 +1 CWE-444
Priority LOW 15

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with read-on…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00197 Published 2026-10-21 Fixed in 19.3.6, 19.4.3 +1 CWE-460
Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package file…

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.0019 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
TI-2026-71470 CVE-2026-6567 · GHSA-h447-825w-w7xq

Incorrect Authorization in GitLab

Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with repo…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00217 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 26

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controll…

CVSS 3.1MEDIUM 5.8 Network Low privileges User interaction EPSS 0.00293 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-601
Priority LOW 19

GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with limited…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00184 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a p…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00219 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-1220
Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Gues…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00217 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 38

GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw…

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.00386 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-625
Priority LOW 30

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00263 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 37

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Deve…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00335 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a…

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.0019 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 35

GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute a…

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.00279 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 15

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a fi…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00214 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
TI-2026-71487 CVE-2026-84284 · GHSA-3g57-f338-642q

Incorrect Authorization in GitLab

Priority LOW 30

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, 19.3 before 19.3.6, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to rea…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00263 Published 2026-10-13 Fixed in 19.2.8, 19.3.6 +1 CWE-863
Load more