Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Release: GitLab 18.11.6, 19.0.3, 19.1.1 Clear all filters
TI-2026-08841 CVE-2026-10086 · GHSA-fc6w-qm7g-jfwh

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with develope…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00349 Published 2026-06-25 Fixed in 18.11.6, 19.0.3 +1 CWE-79
TI-2026-00706 CVE-2026-0934 · GHSA-394r-q6wg-v263

Incorrect Authorization in GitLab

Priority LOW 18

GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with custom r…

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00326 Published 2026-06-25 Fixed in 18.11.6, 19.0.3 +1 CWE-863
TI-2026-01292 CVE-2026-1606 · GHSA-vxf7-7c9g-m3x8

Improper Control of Generation of Code ('Code Injection') in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.8 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user to conceal…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00362 Published 2026-06-25 Fixed in 18.11.6, 19.0.3 +1 CWE-94
TI-2026-01885 CVE-2026-2238 · GHSA-36ff-xw3f-vrx8

Missing Authorization in GitLab

Priority LOW 30

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.5 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an unauthenticated user to view…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00472 Published 2026-06-25 Fixed in 18.11.6, 19.0.3 +1 CWE-862
TI-2026-02742 CVE-2026-3176 · GHSA-3qr8-448j-gmpv

Missing Authorization in GitLab

Priority LOW 15

GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with limited…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.0034 Published 2026-06-25 Fixed in 18.11.6, 19.0.3 +1 CWE-862
TI-2026-04641 CVE-2026-5309 · GHSA-r9m9-87p7-xj9f

Authorization Bypass Through User-Controlled Key in GitLab

Priority LOW 24

GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user to read or mo…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00348 Published 2026-06-25 Fixed in 18.11.6, 19.0.3 +1 CWE-639
TI-2026-05077 CVE-2026-5796 · GHSA-v93g-p6q6-9wwq

Incorrect Authorization in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with Repor…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00389 Published 2026-06-25 Fixed in 18.11.6, 19.0.3 +1 CWE-863
TI-2026-05218 CVE-2026-5952 · GHSA-8vj4-48p6-q87m

Incorrect Authorization in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with deve…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00405 Published 2026-06-25 Fixed in 18.11.6, 19.0.3 +1 CWE-863
TI-2026-07334 CVE-2026-8330 · GHSA-6q88-cw72-pm5w

Insertion of Sensitive Information into Log File in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed sensitive information to be writt…

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00196 Published 2026-06-25 Fixed in 18.11.6, 19.0.3 +1 CWE-532
TI-2026-09210 CVE-2026-10712 · GHSA-93jf-78vf-79px

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority LOW 37

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an unauthenticated user to exec…

CVSS 3.1HIGH 8.0 Network No auth User interaction EPSS 0.00425 Published 2026-06-25 Fixed in 18.11.6, 19.0.3 +1 CWE-79
TI-2026-09822 CVE-2026-11379 · GHSA-9mc7-w3h9-cmmf

Incorrect Authorization in GitLab

Priority LOW 24

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow…

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0034 Published 2026-06-25 Fixed in 18.11.6, 19.0.3 +1 CWE-863
TI-2026-10826 CVE-2026-12635 · GHSA-px7v-hx94-8wmf

Reliance on Reverse DNS Resolution for a Security-Critical Action in GitLab

Priority LOW 15

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with mainta…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00249 Published 2026-06-25 Fixed in 18.11.6, 19.0.3 +1 CWE-350