Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: GitLab 17.10.1, 17.8.6, 17.9.3 Clear all filters
TI-2025-02504 CVE-2025-2867 · GHSA-cxqh-7ch8-jx2g

Improper Control of Generation of Code ('Code Injection') in GitLab

Priority LOW 28

An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00218 Published 2025-03-27 Fixed in 17.8.6, 17.9.3 +1 CWE-94
TI-2025-01967 CVE-2025-2242 · GHSA-8xr4-8v2f-pqrx

Incorrect Authorization in GitLab

Priority MEDIUM 40

An improper access control vulnerability in GitLab CE/EE affecting all versions from 17.4 prior to 17.8.6, 17.9 prior to 17.9.3, and 17.10 prior to 17.10.1 allows a user who was an instance admin before but has since bee…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00423 Published 2025-03-27 Fixed in 17.8.6, 17.9.3 +1 CWE-863