Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Priority LOW 39

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause denial of service by send…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00406 Published 2026-02-25 Fixed in 18.7.5, 18.8.5 +1 CWE-1284
Priority LOW 37

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that under certain circumstances, could have allowed an unauthenticated user to in…

CVSS 3.1HIGH 8.0 Network No auth User interaction EPSS 0.00353 Published 2026-02-25 Fixed in 18.7.5, 18.8.5 +1 CWE-79
Priority HIGH 72

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause regular expression denial…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00409 Published 2026-02-25 Fixed in 18.7.5, 18.8.5 +1 CWE-1333
Priority HIGH 72

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denial of Service by send…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00406 Published 2026-02-25 Fixed in 18.7.5, 18.8.5 +1 CWE-770
Priority MEDIUM 53

GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insuffi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00268 Published 2026-02-25 Fixed in 18.7.5, 18.8.5 +1 CWE-288
Priority LOW 29

An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an authenticated user to cause denial of service by exploiti…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00296 Published 2026-02-25 Fixed in 18.7.5, 18.8.5 +1 CWE-770
Priority LOW 29

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.0 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have, under certain circumstances, allowed an authenticated user with ce…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00351 Published 2026-02-25 Fixed in 18.7.5, 18.8.5 +1 CWE-770
TI-2025-12885 CVE-2025-14103 · GHSA-g3hq-7735-4x6v

Missing Authorization in GitLab

Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthorized user with Developer-role permissions to se…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0022 Published 2026-02-25 Fixed in 18.7.5, 18.8.5 +1 CWE-862