Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: GitLab 17.10.4, 17.8.7, 17.9.6 Clear all filters
TI-2025-00295 CVE-2025-0362 · GHSA-r375-6xr6-qqjq

Improper Restriction of Rendered UI Layers or Frames in GitLab

Priority LOW 31

An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00308 Published 2025-04-10 Fixed in 17.8.7, 17.9.6 +1 CWE-1021
TI-2025-01443 CVE-2025-1677 · GHSA-prvg-5h5v-3mxw

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 33

A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all up to 17.8.7, 17.9 prior to 17.9.6 and 17.10 prior to 17.10.4 A denial of service could occur upon injecting oversized payloads into CI pi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00425 Published 2025-04-10 Fixed in 17.8.7, 17.9.6 +1 CWE-770
TI-2025-02122 CVE-2025-2408 · GHSA-3jj9-4wwv-fwwp

Insufficient Granularity of Access Control in GitLab

Priority LOW 30

An issue has been discovered in GitLab CE/EE affecting all versions from 13.12 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0035 Published 2025-04-10 Fixed in 17.8.7, 17.9.6 +1 CWE-1220