Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: GitLab — GitLab Security Release Blog Post Clear all filters
TI-2025-05603 CVE-2025-6195 · GHSA-2cpf-j432-984q

Direct Request ('Forced Browsing') in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab EE affecting all versions from 13.7 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an authenticated user to view information from security repor…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00344 Published 2025-11-26 Fixed in 18.4.5, 18.5.3 +1 CWE-425
TI-2025-06787 CVE-2025-7449 · GHSA-c3cp-7jp9-c872

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 29

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an authenticated user with specific permissions to cause a…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00444 Published 2025-11-26 Fixed in 18.4.5, 18.5.3 +1 CWE-770
TI-2025-11527 CVE-2025-12571 · GHSA-3cq3-cj5m-hm72

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 39

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an unauthenticated user to cause a Denial of Service cond…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0053 Published 2025-11-26 Fixed in 18.4.5, 18.5.3 +1 CWE-770
TI-2025-11605 CVE-2025-12653 · GHSA-2v4g-65gf-w58f

Authentication Bypass by Spoofing in GitLab

Priority LOW 35

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that under specific conditions could have allowed an unauthenticated user to join…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00309 Published 2025-11-26 Fixed in 18.4.5, 18.5.3 +1 CWE-290