Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: GitLab 18.3.5, 18.4.3, 18.5.1 Clear all filters
TI-2025-09624 CVE-2025-10497 · GHSA-w2m4-xx67-836j

Allocation of Resources Without Limits or Throttling in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00624 Published 2025-10-27 Fixed in 18.3.5, 18.4.3 +1 CWE-770
TI-2025-10975 CVE-2025-11971 · GHSA-jgp3-92wq-g4pq

Incorrect Authorization in GitLab

Priority LOW 28

GitLab has remediated an issue in GitLab EE affecting all versions from 10.6 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to trigger unauthorized pipeline ex…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00245 Published 2025-10-27 Fixed in 18.3.5, 18.4.3 +1 CWE-863
TI-2025-10978 CVE-2025-11974 · GHSA-rcvw-fc36-wjhj

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 29

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to create a denial of service…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00385 Published 2025-10-27 Fixed in 18.3.5, 18.4.3 +1 CWE-770
TI-2025-10487 CVE-2025-11447 · GHSA-xgjv-46p6-hwgv

Allocation of Resources Without Limits or Throttling in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service c…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00821 Published 2025-10-27 Fixed in 18.3.5, 18.4.3 +1 CWE-770