Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: GitLab 18.11.7, 19.0.4, 19.1.2 Clear all filters
TI-2025-11477 CVE-2025-12506 · GHSA-h5pw-h3j7-cj7f

Use of Incorrectly-Resolved Name or Reference in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to create…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00326 Published 2026-07-08 Fixed in 18.11.7, 19.0.4 +1 CWE-706
TI-2026-05573 CVE-2026-6352 · GHSA-7j3x-j5f8-qr4f

Incorrect Authorization in GitLab

Priority LOW 14

GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with auditor-…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00439 Published 2026-07-08 Fixed in 18.11.7, 19.0.4 +1 CWE-863
TI-2026-06045 CVE-2026-6896 · GHSA-7367-wp6r-gcqc

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with develop…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00403 Published 2026-07-08 Fixed in 18.11.7, 19.0.4 +1 CWE-79
TI-2026-06586 CVE-2026-7492 · GHSA-pggx-2v9r-j6gm

Missing Authorization in GitLab

Priority LOW 24

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.1 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an unauthenticated user to determ…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00346 Published 2026-07-08 Fixed in 18.11.7, 19.0.4 +1 CWE-862
TI-2026-07440 CVE-2026-8472 · GHSA-mj6c-rwfc-g9jh

Missing Authorization in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with minimal…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00389 Published 2026-07-08 Fixed in 18.11.7, 19.0.4 +1 CWE-862
TI-2026-10209 CVE-2026-11827 · GHSA-mhr8-wccg-2q8g

Insufficiently Protected Credentials in GitLab

Priority LOW 23

GitLab has remediated an issue in GitLab EE affecting all versions from 9.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with maintaine…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00444 Published 2026-07-08 Partial fix · 18.11.7, 19.0.4 +1 CWE-522
TI-2026-11285 CVE-2026-13320 · GHSA-m49f-rvv4-r4rv

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority LOW 34

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to execute…

CVSS 3.1HIGH 7.3 Network High privileges User interaction EPSS 0.00388 Published 2026-07-08 Fixed in 18.11.7, 19.0.4 +1 CWE-79