Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

23 records

Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package file…

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.0019 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
TI-2026-71470 CVE-2026-6567 · GHSA-h447-825w-w7xq

Incorrect Authorization in GitLab

Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with repo…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00217 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 26

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controll…

CVSS 3.1MEDIUM 5.8 Network Low privileges User interaction EPSS 0.00293 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-601
Priority LOW 19

GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with limited…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00184 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a p…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00219 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-1220
Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Gues…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00217 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 38

GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw…

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.00386 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-625
Priority LOW 30

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00263 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 37

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Deve…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00335 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a…

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.0019 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 35

GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute a…

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.00279 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 15

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a fi…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00214 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 29

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00222 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority LOW 19

GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to approve…

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00131 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
Priority MEDIUM 40

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execut…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00478 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-79
Priority CRITICAL 100KEV

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to exec…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.6522 Published 2026-10-13 Partial fix · 19.2.8, 19.3.5 +1 CWE-190
Priority LOW 35

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject sp…

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00584 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-1427
Priority LOW 16

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to perfor…

CVSS 3.1LOW 3.5 Network Low privileges No interaction EPSS 0.00197 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-918
Priority LOW 20

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configurations, could have allowed an authenticated…

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00092 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-349
Priority LOW 27

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with acce…

CVSS 3.1MEDIUM 6.2 Adjacent network High privileges No interaction EPSS 0.00157 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-532
Priority LOW 13

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with main…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00234 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-863
TI-2026-71513 CVE-2026-104661 · GHSA-7g5q-9jqp-cj84

Incorrect Privilege Assignment in GitLab

Priority LOW 19

GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a cu…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00184 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-266
Priority LOW 19

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a sp…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00192 Published 2026-10-13 Fixed in 19.2.8, 19.3.5 +1 CWE-807