Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: GitLab 17.10.6, 17.11.2, 17.9.8 Clear all filters
TI-2024-08332 CVE-2024-8973 · GHSA-q656-cxxx-f8h7

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 33

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00406 Published 2025-05-09 Fixed in 17.9.8, 17.10.6 +1 CWE-770
TI-2025-00457 CVE-2025-0549 · GHSA-q8cg-g95p-qfr2

Authentication Bypass Using an Alternate Path or Channel in GitLab

Priority LOW 30

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.3 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00457 Published 2025-05-09 Fixed in 17.9.8, 17.10.6 +1 CWE-288
TI-2025-01092 CVE-2025-1278 · GHSA-q768-3m4h-qj2j

Insufficient Granularity of Access Control in GitLab

Priority LOW 39

An issue has been discovered in GitLab CE/EE affecting all versions from 12.0 before 17.9.8, 17.10 before 17.10.6, and 17.11 before 17.11.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00391 Published 2025-05-09 Fixed in 17.9.8, 17.10.6 +1 CWE-1220