Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Release: GitLab 19.0.6, 19.1.4, 19.2.2 Clear all filters
TI-2025-08692 CVE-2025-9486 · GHSA-j94w-j9cr-q9pj

Incorrect Privilege Assignment in GitLab

Priority MEDIUM 49

GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed a user with a pending membership to…

CVSS 3.1LOW 3.3 Network High privileges No interaction EPSS 0.00341 Published 2026-08-12 Fixed in 19.0.6, 19.1.4 +1 CWE-266
TI-2026-04253 CVE-2026-4879 · GHSA-8qfw-v7h4-gcfv

Missing Authorization in GitLab

Priority MEDIUM 53

GitLab has remediated an issue in GitLab EE affecting all versions from 16.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00331 Published 2026-08-12 Fixed in 19.0.6, 19.1.4 +1 CWE-862
TI-2026-05984 CVE-2026-6821 · GHSA-9gxq-p669-5c5h

Missing Authorization in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to bypass IP-b…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00359 Published 2026-08-12 Fixed in 19.0.6, 19.1.4 +1 CWE-862
TI-2026-12814 CVE-2026-15217 · GHSA-qqh6-p6j8-qj74

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed cross-site scripting due to impro…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00525 Published 2026-08-12 Fixed in 19.0.6, 19.1.4 +1 CWE-79
TI-2026-12813 CVE-2026-15216 · GHSA-2j84-5rxg-q8j5

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed cross-site scripting due to impro…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00525 Published 2026-08-12 Fixed in 19.0.6, 19.1.4 +1 CWE-79
TI-2026-06530 CVE-2026-7427 · GHSA-mrwr-f6g8-28q2

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 34

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an unauthenticated user to cause…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00618 Published 2026-08-12 Fixed in 19.0.6, 19.1.4 +1 CWE-770
TI-2026-07616 CVE-2026-8667 · GHSA-6qfh-3rvh-8x4w

Incorrect Authorization in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with develo…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00392 Published 2026-08-12 Fixed in 19.0.6, 19.1.4 +1 CWE-863
TI-2026-12979 CVE-2026-15423 · GHSA-wf8r-f3x5-5p4r

Incorrect Authorization in GitLab

Priority LOW 37

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with develo…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.004 Published 2026-08-12 Fixed in 19.0.6, 19.1.4 +1 CWE-863
TI-2026-15000 CVE-2026-18244 · GHSA-hqfp-ppgf-xc8v

Missing Authorization in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab EE affecting all versions from 17.7 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to view restri…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00281 Published 2026-08-12 Fixed in 19.0.6, 19.1.4 +1 CWE-862