Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitLab 17.11.6, 18.0.4, 18.1.2 Clear all filters
TI-2025-02980 CVE-2025-3396 · GHSA-3qvq-h337-wprv

Incorrect Authorization in GitLab

Priority LOW 20

An issue has been discovered in GitLab EE affecting all versions from 13.3 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that could have allowed authenticated project owners to bypass group-level forking res…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0035 Published 2025-07-10 Fixed in 17.11.6, 18.0.4 +1 CWE-863
TI-2025-06318 CVE-2025-6948 · GHSA-w7w3-28qr-7whc

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority MEDIUM 40

An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that, under certain conditions, could have allowed a successful attacker to execut…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.0054 Published 2025-07-10 Fixed in 17.11.6, 18.0.4 +1 CWE-79