Priority MEDIUM 52
An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 th…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01349 · Published 2026-10-22 · Partial fix · 18.11.13, 19.0.10 +5 CWE-190
Priority LOW 32
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with a re…
CVSS 3.1MEDIUM 6.8· Network · Low privileges · No interaction · EPSS 0.00395 · Published 2026-10-21 · Fixed in 19.3.6, 19.4.3 +1 CWE-863
Priority LOW 28
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authenticated to read milestone metadata, including t…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00238 · Published 2026-10-21 · Fixed in 19.3.6, 19.4.3 +1 CWE-639
Priority LOW 15
GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a require…
CVSS 3.1LOW 3.1· Network · Low privileges · No interaction · EPSS 0.0026 · Published 2026-10-21 · Fixed in 19.3.6, 19.4.3 +1 CWE-706
Priority LOW 38
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAuth SAML and LDAP auto-linking were both enabled, an authenticated…
CVSS 3.1HIGH 8.2· Network · Low privileges · No interaction · EPSS 0.00543 · Published 2026-10-21 · Fixed in 19.3.6, 19.4.3 +1 CWE-90
Priority LOW 31
GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the instance-wide SAML or LDAP membership lock was enabled, an authenticat…
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00261 · Published 2026-10-21 · Fixed in 19.3.6, 19.4.3 +1 CWE-863
Priority LOW 13
GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an instance administrator locked a group's Duo availability, an authentica…
CVSS 3.1LOW 2.7· Network · High privileges · No interaction · EPSS 0.00232 · Published 2026-10-21 · Fixed in 19.3.6, 19.4.3 +1 CWE-863
Priority LOW 16
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue fro…
CVSS 3.1LOW 3.5· Network · Low privileges · User interaction · EPSS 0.00217 · Published 2026-10-21 · Fixed in 19.3.6, 19.4.3 +1 CWE-524
Priority LOW 29
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have retrieved sen…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00277 · Published 2026-10-21 · Fixed in 19.3.6, 19.4.3 +1 CWE-201
Priority LOW 19
GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00126 · Published 2026-10-21 · Fixed in 19.3.6, 19.4.3 +1 CWE-348
Priority LOW 32
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have poisoned a shar…
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.0019 · Published 2026-10-21 · Fixed in 19.3.6, 19.4.3 +1 CWE-444
Priority LOW 15
GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with read-on…
CVSS 3.1LOW 3.1· Network · Low privileges · No interaction · EPSS 0.00197 · Published 2026-10-21 · Fixed in 19.3.6, 19.4.3 +1 CWE-460
Priority LOW 19
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package file…
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.0019 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 19
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with repo…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00217 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 26
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controll…
CVSS 3.1MEDIUM 5.8· Network · Low privileges · User interaction · EPSS 0.00293 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-601
Priority LOW 19
GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with limited…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00184 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 19
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a p…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00219 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-1220
Priority LOW 19
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Gues…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00217 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 38
GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw…
CVSS 3.1HIGH 8.2· Network · Low privileges · No interaction · EPSS 0.00386 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-625
Priority LOW 30
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00263 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 37
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Deve…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00335 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 19
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a…
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.0019 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 35
GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute a…
CVSS 3.1HIGH 7.7· Network · Low privileges · User interaction · EPSS 0.00279 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 15
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a fi…
CVSS 3.1LOW 3.1· Network · Low privileges · No interaction · EPSS 0.00214 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 30
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, 19.3 before 19.3.6, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to rea…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00263 · Published 2026-10-13 · Fixed in 19.2.8, 19.3.6 +1 CWE-863
Load more