Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitLab 16.11.5, 17.0.3, 17.1.1 Clear all filters
TI-2024-04638 CVE-2024-4994 · GHSA-44j4-r7x2-mjhj

Cross-Site Request Forgery (CSRF) in GitLab

Priority LOW 37

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1.0 before 16.11.5, all versions starting from 17.0 before 17.0.3, all versions starting from 17.1.0 before 17.1.1 which allowed for a CSRF atta…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00391 Published 2025-06-20 Fixed in 16.11.5, 17.0.3 +1 CWE-352
TI-2024-03754 CVE-2024-4025 · GHSA-6w53-65xx-mgj9

Inefficient Regular Expression Complexity in GitLab

Priority LOW 34

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions from 7.10 prior before 16.11.5, version 17.0 before 17.0.3, and 17.1 before 17.1.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00553 Published 2025-06-20 Fixed in 16.11.5, 17.0.3 +1 CWE-1333