Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: GitLab 18.5.5, 18.6.3, 18.7.1 Clear all filters
TI-2025-03493 CVE-2025-3950 · GHSA-6mpj-fw9g-9wqm

Exposure of Private Personal Information to an Unauthorized Actor in GitLab

Priority LOW 16

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed a user to leak certain information by referencing speciall…

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.0027 Published 2026-01-09 Fixed in 18.5.5, 18.6.3 +1 CWE-359
TI-2025-08455 CVE-2025-9222 · GHSA-p9cp-qq4c-2wr5

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.2 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to achieve stored cross-site scrip…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00423 Published 2026-01-09 Fixed in 18.5.5, 18.6.3 +1 CWE-79
TI-2025-09672 CVE-2025-10569 · GHSA-rh5v-9jwc-7736

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 29

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to create a denial of service conditi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00521 Published 2026-01-09 Fixed in 18.5.5, 18.6.3 +1 CWE-770
TI-2025-10298 CVE-2025-11246 · GHSA-w2j6-r4xj-rjcj

Insufficient Granularity of Access Control in GitLab

Priority LOW 25

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.4 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user with specific permissions to remove…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00428 Published 2026-01-09 Fixed in 18.5.5, 18.6.3 +1 CWE-1220
TI-2025-12588 CVE-2025-13772 · GHSA-jxx7-c7v6-wh2p

Missing Authorization in GitLab

Priority LOW 32

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to access and utilize AI model settings…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00423 Published 2026-01-09 Fixed in 18.5.5, 18.6.3 +1 CWE-862
TI-2025-12596 CVE-2025-13781 · GHSA-p7gw-xwgf-7w7c

Missing Authorization in GitLab

Priority LOW 29

GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to modify instance-wide AI feature prov…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00445 Published 2026-01-09 Fixed in 18.5.5, 18.6.3 +1 CWE-862