Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: GitLab 19.2.7, 19.3.3, 19.4.1 Clear all filters
TI-2026-03928 CVE-2026-4523 · GHSA-75vf-vmx4-frc7

Missing Authorization in GitLab

Priority LOW 17

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00258 Published 2026-09-29 Fixed in 19.2.7, 19.3.3 +1 CWE-862
TI-2026-07854 CVE-2026-8937 · GHSA-m26x-jfj3-qhfg

Missing Authorization in GitLab

Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to read pri…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00227 Published 2026-09-29 Fixed in 19.2.7, 19.3.3 +1 CWE-862
TI-2026-09046 CVE-2026-10518 · GHSA-r9w4-9vh4-q9m8

Incorrect Authorization in GitLab

Priority LOW 19

GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with guest-lev…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00227 Published 2026-09-29 Fixed in 19.2.7, 19.3.3 +1 CWE-863
TI-2026-58246 CVE-2026-84739 · GHSA-hrj5-qwx9-f2q7

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00343 Published 2026-09-29 Fixed in 19.2.7, 19.3.3 +1 CWE-79