Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Release: GitLab 19.0.5, 19.1.3, 19.2.1 Clear all filters
TI-2025-13304 CVE-2025-14562 · GHSA-45h8-qrqh-xr5v

Incorrect Authorization in GitLab

Priority MEDIUM 48

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with develo…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00284 Published 2026-07-29 Fixed in 19.0.5, 19.1.3 +1 CWE-863
TI-2026-02672 CVE-2026-3093 · GHSA-2rc9-8cx9-fxpr

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority MEDIUM 55

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00286 Published 2026-07-29 Fixed in 19.0.5, 19.1.3 +1 CWE-79
TI-2026-04067 CVE-2026-4672 · GHSA-8jc8-cvqj-p926

Missing Authorization in GitLab

Priority MEDIUM 53

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with guest-…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00389 Published 2026-07-29 Fixed in 19.0.5, 19.1.3 +1 CWE-862
TI-2026-05495 CVE-2026-6267 · GHSA-6fhj-cgmm-xfx6

Insertion of Sensitive Information Into Sent Data in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with Deve…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00613 Published 2026-07-29 Fixed in 19.0.5, 19.1.3 +1 CWE-201
TI-2026-05558 CVE-2026-6336 · GHSA-g9g2-qc64-jgcj

Incorrect Authorization in GitLab

Priority MEDIUM 63

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthorized user to view proj…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00457 Published 2026-07-29 Fixed in 19.0.5, 19.1.3 +1 CWE-863
TI-2026-10672 CVE-2026-12436 · GHSA-94p8-87ff-w336

Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab

Priority LOW 39

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to modify C…

CVSS 3.1HIGH 8.4 Network Low privileges No interaction EPSS 0.00462 Published 2026-07-29 Fixed in 19.0.5, 19.1.3 +1 CWE-915
TI-2026-11143 CVE-2026-13113 · GHSA-629v-rwjx-m485

Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab

Priority LOW 28

GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to merge code…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00257 Published 2026-07-29 Fixed in 19.0.5, 19.1.3 +1 CWE-367
TI-2026-12127 CVE-2026-14341 · GHSA-35pc-qwv6-4858

Missing Authorization in GitLab

Priority MEDIUM 56

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with Mainta…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0053 Published 2026-07-29 Fixed in 19.0.5, 19.1.3 +1 CWE-862
TI-2026-12134 CVE-2026-14351 · GHSA-86r3-q889-hvg2

Exposure of Sensitive Information Through Metadata in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthenticated user to view th…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00402 Published 2026-07-29 Fixed in 19.0.5, 19.1.3 +1 CWE-1230
TI-2026-13377 CVE-2026-15975 · GHSA-x55f-grmq-xwwm

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 39

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthenticated user to cause…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00509 Published 2026-07-29 Fixed in 19.0.5, 19.1.3 +1 CWE-770
TI-2026-13811 CVE-2026-16553 · GHSA-5c98-v836-vg79

Insufficiently Protected Credentials in GitLab

Priority LOW 24

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed some sensitive information to be dis…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00341 Published 2026-07-29 Fixed in 19.0.5, 19.1.3 +1 CWE-522