Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitLab 18.0.5, 18.1.3, 18.2.1 Clear all filters
TI-2025-03956 CVE-2025-4439 · GHSA-2r7r-6rh2-7qc9

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority LOW 35

An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed an authenticated user to perform cross-site scripting attac…

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.0028 Published 2025-07-23 Fixed in 18.0.5, 18.1.3 +1 CWE-79
TI-2025-04196 CVE-2025-4700 · GHSA-cgm9-25c8-vhvr

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority LOW 39

An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under specific circumstances, could have potentially allowed a successful att…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00259 Published 2025-07-23 Fixed in 18.0.5, 18.1.3 +1 CWE-79