Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Priority MEDIUM 62

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticated user to cause a denial of service due…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00424 Published 2026-03-25 Fixed in 18.8.7, 18.9.3 +1 CWE-1284
Priority LOW 29

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticated user to cause a denial of service due t…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00424 Published 2026-03-25 Fixed in 18.8.7, 18.9.3 +1 CWE-770
TI-2025-13336 CVE-2025-14595 · GHSA-8jj8-qh37-33q3

Missing Authorization in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that under certain conditions could have allowed an authenticated user with Planner…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00262 Published 2026-03-25 Fixed in 18.8.7, 18.9.3 +1 CWE-862
Priority LOW 33

GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to access API tokens of self-hosted…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00467 Published 2026-03-25 Fixed in 18.8.7, 18.9.3 +1 CWE-306
Priority LOW 37

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 7.11 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to bypass WebAuthn two-factor au…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00354 Published 2026-03-25 Fixed in 18.8.7, 18.9.3 +1 CWE-288
TI-2026-02334 CVE-2026-2726 · GHSA-4j77-rj27-2wxq

Incorrect Authorization in GitLab

Priority LOW 19

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticated user to perform unauthorized actions o…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00197 Published 2026-03-25 Fixed in 18.8.7, 18.9.3 +1 CWE-863
Priority LOW 24

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticated user to execute arbitrary JavaScript in…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00176 Published 2026-03-25 Fixed in 18.8.7, 18.9.3 +1 CWE-79
Priority LOW 35

GitLab has remediated an issue in GitLab EE affecting all versions from 15.4 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticated user to add email addresses to targeted us…

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.0019 Published 2026-03-25 Fixed in 18.8.7, 18.9.3 +1 CWE-80
Priority LOW 39

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to execute arbitrary GraphQL mu…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00215 Published 2026-03-25 Fixed in 18.8.7, 18.9.3 +1 CWE-352
Priority LOW 39

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to cause a denial of service by…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00487 Published 2026-03-25 Fixed in 18.8.7, 18.9.3 +1 CWE-407
TI-2026-03799 CVE-2026-4363 · GHSA-c3cq-wgrq-qm9r

Incorrect Authorization in GitLab

Priority LOW 16

GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that under certain conditions could have allowed an authenticated user to gain unau…

CVSS 3.1LOW 3.7 Network Low privileges User interaction EPSS 0.00121 Published 2026-03-25 Fixed in 18.8.7, 18.9.3 +1 CWE-863