Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Release: GitLab 19.1.8, 19.2.6, 19.3.2 Clear all filters
TI-2026-59109 CVE-2026-86341 · GHSA-9pgf-qvj2-p23v

Access Control Check Implemented After Asset is Accessed in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user with Owner or Maintainer permis…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00364 Published 2026-09-16 Fixed in 19.1.8, 19.2.6 +1 CWE-1280
TI-2024-10396 CVE-2024-11222 · GHSA-mvcm-rmq8-7vvx

Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab

Priority LOW 30

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed a developer user to perform actio…

CVSS 3.1MEDIUM 6.4 Network Low privileges User interaction EPSS 0.00362 Published 2026-09-16 Fixed in 19.1.8, 19.2.6 +1 CWE-367
TI-2025-13564 CVE-2025-14871 · GHSA-22cc-9j92-vx92

Allocation of Resources Without Limits or Throttling in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to caus…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00636 Published 2026-09-16 Fixed in 19.1.8, 19.2.6 +1 CWE-770
TI-2026-00895 CVE-2026-1168 · GHSA-8c2h-q92r-2j66

Allocation of Resources Without Limits or Throttling in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to caus…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00636 Published 2026-09-16 Fixed in 19.1.8, 19.2.6 +1 CWE-770
TI-2026-03341 CVE-2026-3855 · GHSA-74fm-x674-6p6m

Improper Control of Resource Identifiers ('Resource Injection') in GitLab

Priority LOW 30

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with proj…

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00341 Published 2026-09-16 Fixed in 19.1.8, 19.2.6 +1 CWE-99
TI-2026-06604 CVE-2026-7514 · GHSA-4793-7rmv-288c

Missing Authorization in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with developer-role permissions could substitute packag…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00376 Published 2026-09-16 Fixed in 19.1.8, 19.2.6 +1 CWE-862
TI-2026-07076 CVE-2026-8030 · GHSA-prpx-9q78-g4hg

Missing Authorization in GitLab

Priority LOW 21

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to prevent…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00506 Published 2026-09-16 Fixed in 19.1.8, 19.2.6 +1 CWE-862
TI-2026-13977 CVE-2026-16794 · GHSA-cgh2-rmr4-c8fm

Missing Authorization in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with the Secu…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00392 Published 2026-09-16 Fixed in 19.1.8, 19.2.6 +1 CWE-862
TI-2026-15936 CVE-2026-19619 · GHSA-q86m-h56q-9rjq

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority LOW 21

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to execut…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00303 Published 2026-09-16 Fixed in 19.1.8, 19.2.6 +1 CWE-79
TI-2026-54425 CVE-2026-78252 · GHSA-3xqm-9h96-4cr4

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority LOW 37

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user could have induced a targete…

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.0027 Published 2026-09-16 Fixed in 19.1.8, 19.2.6 +1 CWE-79
TI-2026-55201 CVE-2026-79708 · GHSA-4gg6-pm69-gwm2

Incorrect Authorization in GitLab

Priority LOW 37

GitLab has remediated an issue in GitLab EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions could have allowed an authenticated user with develope…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00383 Published 2026-09-16 Fixed in 19.1.8, 19.2.6 +1 CWE-863