Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: GitLab 18.1.5, 18.2.5, 18.3.1 Clear all filters
TI-2025-01971 CVE-2025-2246 · GHSA-qccf-5wwv-jq8x

Missing Authorization in GitLab

Priority LOW 32

An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have allowed unauthenticated users to access sensitive manual CI/CD variables by qu…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00276 Published 2025-08-27 Fixed in 18.1.5, 18.2.5 +1 CWE-862
TI-2025-03168 CVE-2025-3601 · GHSA-v8g6-hvf8-9cwq

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 29

An issue has been discovered in GitLab CE/EE affecting all versions from 8.15 before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have could have allowed an authenticated user to cause a Denial of Servic…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00324 Published 2025-08-27 Fixed in 18.1.5, 18.2.5 +1 CWE-770
TI-2025-03758 CVE-2025-4225 · GHSA-rq6q-w27x-f9x2

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 39

An issue has been discovered in GitLab CE/EE affecting all versions from 14.1 before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that that under certain conditions could have allowed an unauthenticated attacker to…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00371 Published 2025-08-27 Fixed in 18.1.5, 18.2.5 +1 CWE-770
TI-2025-04573 CVE-2025-5101 · GHSA-3c57-hg33-rhrp

Improper Control of Generation of Code ('Code Injection') in GitLab

Priority LOW 22

An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that under certain conditions could have allowed an authenticated attacker to distribute malic…

CVSS 3.1MEDIUM 5.0 Local High privileges User interaction EPSS 0.00128 Published 2025-08-27 Fixed in 18.1.5, 18.2.5 +1 CWE-94