Vulnerabilities

TI-2026-04292 CVE-2026-4922 · GHSA-5v2j-wv46-86vp

Cross-Site Request Forgery (CSRF) in GitLab

LOW 37

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an unauthenticated user to execute GraphQL mutations o…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00267 Published 2026-04-22 Fixed in 18.9.6, 18.10.4 +1 CWE-352

TI-2025-00145 CVE-2025-0186 · GHSA-vhmr-xxmg-qhfg

Allocation of Resources Without Limits or Throttling in GitLab

MEDIUM 62

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service under…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00402 Published 2026-04-22 Fixed in 18.9.6, 18.10.4 +1 CWE-770

TI-2025-03468 CVE-2025-3922 · GHSA-q9qr-p283-j9rm

Allocation of Resources Without Limits or Throttling in GitLab

MEDIUM 62

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.4 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service by ov…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00402 Published 2026-04-22 Fixed in 18.9.6, 18.10.4 +1 CWE-770

TI-2025-05436 CVE-2025-6016 · GHSA-4cg5-m8c9-x738

Allocation of Resources Without Limits or Throttling in GitLab

MEDIUM 62

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service due to…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00449 Published 2026-04-22 Fixed in 18.9.6, 18.10.4 +1 CWE-770

TI-2025-09137 CVE-2025-9957 · GHSA-6gww-qgc8-r365

Incorrect Authorization in GitLab

MEDIUM 47

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain conditions could have allowed an authenticated user with pr…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00381 Published 2026-04-22 Fixed in 18.9.6, 18.10.4 +1 CWE-863

TI-2026-01345 CVE-2026-1660 · GHSA-xv99-vgw5-r3gg

Allocation of Resources Without Limits or Throttling in GitLab

MEDIUM 62

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain conditions could have allowed an authenticated user to caus…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00402 Published 2026-04-22 Fixed in 18.9.6, 18.10.4 +1 CWE-770

TI-2026-04597 CVE-2026-5262 · GHSA-g9pv-f88j-p6rr

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

LOW 36

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.1.0 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain conditions could have allowed an unauthenticated user to…

CVSS 3.1HIGH 8.0 Network No auth User interaction EPSS 0.00223 Published 2026-04-22 Fixed in 18.9.6, 18.10.4 +1 CWE-79

TI-2026-05710 CVE-2026-6515 · GHSA-h8q5-vxrg-qgmf

Insufficient Session Expiration in GitLab

LOW 24

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed a user to use invalidated or incorrectly scoped creden…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00173 Published 2026-04-22 Fixed in 18.9.6, 18.10.4 +1 CWE-613

Vulnerabilities

Filters