Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Release: GitLab 18.10.8, 18.11.5, 19.0.2 Clear all filters
TI-2026-01195 CVE-2026-1500 · GHSA-jfx9-cc6f-6x6q

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 29

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to caus…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00321 Published 2026-06-11 Fixed in 18.10.8, 18.11.5 +1 CWE-770
TI-2026-03063 CVE-2026-3553 · GHSA-h8wc-8hmg-pcc9

Incorrect Authorization in GitLab

Priority LOW 15

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to acces…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00236 Published 2026-06-11 Fixed in 18.10.8, 18.11.5 +1 CWE-863
TI-2026-05497 CVE-2026-6269 · GHSA-c3j7-m5hr-8w75

Incorrect Authorization in GitLab

Priority LOW 24

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with de…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00221 Published 2026-06-11 Fixed in 18.10.8, 18.11.5 +1 CWE-863
TI-2026-05504 CVE-2026-6277 · GHSA-hm74-p2xf-rqgc

Incorrect Authorization in GitLab

Priority LOW 19

GitLab has remediated an issue in GitLab EE affecting all versions from 13.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with Securi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00219 Published 2026-06-11 Fixed in 18.10.8, 18.11.5 +1 CWE-863
TI-2026-06104 CVE-2026-6976 · GHSA-7mq5-3vcf-v96v

Authorization Bypass Through User-Controlled Key in GitLab

Priority LOW 17

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with dev…

CVSS 3.1LOW 3.7 Network Low privileges User interaction EPSS 0.00158 Published 2026-06-11 Fixed in 18.10.8, 18.11.5 +1 CWE-639
TI-2026-06364 CVE-2026-7250 · GHSA-cx4g-hr74-m89m

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 39

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an unauthenticated user to ca…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0037 Published 2026-06-11 Fixed in 18.10.8, 18.11.5 +1 CWE-770
TI-2026-07548 CVE-2026-8589 · GHSA-q9j8-24p8-jq8j

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority LOW 39

GitLab has remediated an issue in GitLab EE affecting all versions from 13.1.4 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to add un…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00255 Published 2026-06-11 Fixed in 18.10.8, 18.11.5 +1 CWE-79
TI-2026-08091 CVE-2026-9204 · GHSA-c4m8-pv9j-v7mm

Server-Side Request Forgery (SSRF) in GitLab

Priority LOW 28

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to read…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00247 Published 2026-06-11 Fixed in 18.10.8, 18.11.5 +1 CWE-918
TI-2026-08497 CVE-2026-9694 · GHSA-5cr4-qwvx-32j2

Improper Neutralization of Substitution Characters in GitLab

Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions, could have allowed an unauthenticated user to im…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00211 Published 2026-06-11 Fixed in 18.10.8, 18.11.5 +1 CWE-153
TI-2026-08842 CVE-2026-10087 · GHSA-vcvx-j5vc-8jhr

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority LOW 39

GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with develo…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00314 Published 2026-06-11 Fixed in 18.10.8, 18.11.5 +1 CWE-79
TI-2026-09228 CVE-2026-10733 · GHSA-8322-7g6r-mw9p

Improper Restriction of Rendered UI Layers or Frames in GitLab

Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that could have allowed an authenticated user to cause denial of service on the…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0022 Published 2026-06-11 Fixed in 18.10.8, 18.11.5 +1 CWE-1021