Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitLab 18.11.1 Clear all filters
TI-2026-02809 CVE-2026-3254 · GHSA-rv75-mvrq-37g2

Improper Restriction of Rendered UI Layers or Frames in GitLab

Priority LOW 16

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that under certain conditions could have allowed an authenticated user to load unauthorized content into another user's brow…

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00152 Published 2026-04-22 Fixed in 18.11.1 CWE-1021
TI-2026-04705 CVE-2026-5377 · GHSA-h2q6-mm6m-cfxp

Incorrect Authorization in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that could have allowed an authenticated user to access titles of confidential or private issues in public projects due to i…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00258 Published 2026-04-22 Fixed in 18.11.1 CWE-863