Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: GitLab 18.3.6, 18.4.4, 18.5.2 Clear all filters
TI-2025-11892 CVE-2025-12983 · GHSA-9mv9-gw4x-7xw4

Memory Allocation with Excessive Size Value in GitLab

Priority LOW 29

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to cause a denial of service con…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00449 Published 2025-11-15 Fixed in 18.3.6, 18.4.4 +1 CWE-789
TI-2025-02281 CVE-2025-2615 · GHSA-rm4r-vwvw-vj67

Insertion of Sensitive Information Into Sent Data in GitLab

Priority LOW 29

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that could have allowed a blocked user to access sensitive information by establi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.004 Published 2025-11-15 Fixed in 18.3.6, 18.4.4 +1 CWE-201
TI-2025-06315 CVE-2025-6945 · GHSA-r22j-98fp-4fw9

Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

Priority LOW 25

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from…

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00283 Published 2025-11-15 Fixed in 18.3.6, 18.4.4 +1 CWE-77
TI-2025-05581 CVE-2025-6171 · GHSA-pv96-f897-xcch

Missing Authorization in GitLab

Priority LOW 24

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker with reporter access to view bra…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00336 Published 2025-11-15 Fixed in 18.3.6, 18.4.4 +1 CWE-862
TI-2025-06367 CVE-2025-7000 · GHSA-mfcp-rjv7-385m

Insertion of Sensitive Information Into Sent Data in GitLab

Priority LOW 20

An issue has been discovered in GitLab CE/EE affecting all versions from 17.6 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that, under specific conditions, could have allowed unauthorized users to view conf…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00384 Published 2025-11-15 Fixed in 18.3.6, 18.4.4 +1 CWE-201
TI-2025-07061 CVE-2025-7736 · GHSA-7hhv-h469-wc4q

Incorrect Authorization in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to bypass access control restric…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00351 Published 2025-11-15 Fixed in 18.3.6, 18.4.4 +1 CWE-863
TI-2025-10877 CVE-2025-11865 · GHSA-5vpg-xw87-4738

Incorrect Authorization in GitLab

Priority LOW 24

An issue has been discovered in GitLab EE affecting all versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that, under certain circumstances, could have allowed an attacker to remove Duo flows o…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0024 Published 2025-11-15 Fixed in 18.3.6, 18.4.4 +1 CWE-863