Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: GitLab 18.10.7, 18.11.4, 19.0.1 Clear all filters
TI-2026-01101 CVE-2026-1402 · GHSA-wgq9-qp63-g8j3

Allocation of Resources Without Limits or Throttling in GitLab

Priority MEDIUM 62

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an authenticated user to cause…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00471 Published 2026-05-27 Fixed in 18.10.7, 18.11.4 +1 CWE-770
TI-2026-02221 CVE-2026-2601 · GHSA-f3gg-585w-gjj2

Missing Authorization in GitLab

Priority MEDIUM 53

GitLab has remediated an issue in GitLab EE affecting all versions from 11.5 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an authenticated user with develo…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00243 Published 2026-05-27 Fixed in 18.10.7, 18.11.4 +1 CWE-862
TI-2026-04244 CVE-2026-4868 · GHSA-64q9-48cg-f6vv

Authorization Bypass Through User-Controlled Key in GitLab

Priority LOW 38

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that, under certain conditions, could have allowed an authenticated user to cause…

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.00427 Published 2026-05-27 Fixed in 18.10.7, 18.11.4 +1 CWE-639
TI-2026-04631 CVE-2026-5296 · GHSA-rqc8-7v7g-9hfr

Missing Authorization in GitLab

Priority LOW 19

GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that when foundational flows were enabled at the group level, could have allowed a…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00196 Published 2026-05-27 Fixed in 18.10.7, 18.11.4 +1 CWE-862
TI-2026-05886 CVE-2026-6713 · GHSA-r38r-hvg8-xqhf

Incorrect Authorization in GitLab

Priority MEDIUM 63

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an unauthorized user to enumer…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00361 Published 2026-05-27 Fixed in 18.10.7, 18.11.4 +1 CWE-863
TI-2026-07659 CVE-2026-8716 · GHSA-5p55-qcqv-882w

Use of Incorrectly-Resolved Name or Reference in GitLab

Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an authenticated user to acces…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00187 Published 2026-05-27 Fixed in 18.10.7, 18.11.4 +1 CWE-706