Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: GitLab 17.10.7, 17.11.3, 18.0.1 Clear all filters
TI-2024-11217 CVE-2024-12093 · GHSA-7rfw-87cg-pgwh

Improper Validation of Consistency within Input in GitLab

Priority LOW 31

An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00542 Published 2025-05-22 Fixed in 17.10.7, 17.11.3 +1 CWE-1288
TI-2025-00507 CVE-2025-0605 · GHSA-v9g5-36x8-7xmx

Weak Authentication in GitLab

Priority LOW 21

An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00324 Published 2025-05-22 Fixed in 17.10.7, 17.11.3 +1 CWE-1390
TI-2025-00836 CVE-2025-0993 · GHSA-g93f-rhw4-8mj3

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 33

An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00507 Published 2025-05-22 Fixed in 17.10.7, 17.11.3 +1 CWE-770
TI-2025-02491 CVE-2025-2853 · GHSA-crr3-cvh5-8wfr

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 29

An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00468 Published 2025-05-22 Fixed in 17.10.7, 17.11.3 +1 CWE-770
TI-2025-02716 CVE-2025-3111 · GHSA-r3m4-8xwf-9fpp

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 29

An issue has been discovered in GitLab CE/EE affecting all versions from 10.2 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00465 Published 2025-05-22 Fixed in 17.10.7, 17.11.3 +1 CWE-770
TI-2025-04463 CVE-2025-4979 · GHSA-9vrq-hh79-6v9m

Insufficient Granularity of Access Control in GitLab

Priority LOW 33

An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00442 Published 2025-05-22 Fixed in 17.10.7, 17.11.3 +1 CWE-1220