Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: GitLab 18.1.6, 18.2.6, 18.3.2 Clear all filters
TI-2025-01069 CVE-2025-1250 · GHSA-mmm6-54w9-rfq2

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 29

An issue has been discovered in GitLab CE/EE affecting all versions from 15.0 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed an authenticated user to stall background job processing by…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00488 Published 2025-09-12 Fixed in 18.1.6, 18.2.6 +1 CWE-770
TI-2025-01981 CVE-2025-2256 · GHSA-m8q6-f6pj-j3mh

Improper Validation of Specified Quantity in Input in GitLab

Priority LOW 33

An issue has been discovered in GitLab CE/EE affecting all versions from 7.12 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed unauthorized users to render the GitLab instance unresponsiv…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00528 Published 2025-09-12 Fixed in 18.1.6, 18.2.6 +1 CWE-1284
TI-2025-05855 CVE-2025-6454 · GHSA-j42x-rxgc-89xm

Server-Side Request Forgery (SSRF) in GitLab

Priority LOW 39

An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to make unintended internal requests th…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00733 Published 2025-09-12 Fixed in 18.1.6, 18.2.6 +1 CWE-918
TI-2025-06148 CVE-2025-6769 · GHSA-3652-xvjx-j36p

Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab

Priority LOW 20

An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to view administrator-only maintenance n…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00335 Published 2025-09-12 Fixed in 18.1.6, 18.2.6 +1 CWE-497
TI-2025-06689 CVE-2025-7337 · GHSA-r22x-m5v3-7gmh

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 29

An issue has been discovered in GitLab CE/EE affecting all versions from 7.8 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed an authenticated user with Developer-level access to cause a…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00488 Published 2025-09-12 Fixed in 18.1.6, 18.2.6 +1 CWE-770
TI-2025-09267 CVE-2025-10094 · GHSA-6cfx-8gfv-h75g

Improper Validation of Specified Quantity in Input in GitLab

Priority LOW 29

An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to disrupt access to token listings and…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00491 Published 2025-09-12 Fixed in 18.1.6, 18.2.6 +1 CWE-1284