Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

TI-2025-08690 CVE-2025-9484 · GHSA-m3c6-4xg4-583x

Missing Authorization in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab EE affecting all versions from 16.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstances could have allowed an authenticated user to have a…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00274 Published 2026-04-08 Fixed in 18.8.9, 18.9.5 +1 CWE-862
Priority MEDIUM 40

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an unauthenticated user to cause denial of service by se…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00588 Published 2026-04-08 Fixed in 18.8.9, 18.9.5 +1 CWE-1284
Priority HIGH 72

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an unauthenticated user to cause denial of service due…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00562 Published 2026-04-08 Fixed in 18.8.9, 18.9.5 +1 CWE-1284
Priority LOW 29

GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user to cause denial of service to the Git…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00428 Published 2026-04-08 Fixed in 18.8.9, 18.9.5 +1 CWE-1284
Priority LOW 26

GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have allowed an authenticated user to leak IP…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00436 Published 2026-04-08 Fixed in 18.8.9, 18.9.5 +1 CWE-94
TI-2026-01435 CVE-2026-1752 · GHSA-4gm7-r4jp-2xqg

Incorrect Authorization in GitLab

Priority MEDIUM 53

GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with developer-role permissions to mo…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00323 Published 2026-04-08 Fixed in 18.8.9, 18.9.5 +1 CWE-863
Priority LOW 20

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user to access confidential issues assi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0032 Published 2026-04-08 Fixed in 18.8.9, 18.9.5 +1 CWE-639
TI-2026-02235 CVE-2026-2619 · GHSA-76v4-rwr7-cgr3

Incorrect Authorization in GitLab

Priority LOW 20

GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstances could have allowed an authenticated user with audi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00339 Published 2026-04-08 Fixed in 18.8.9, 18.9.5 +1 CWE-863
Priority LOW 24

GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated use…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0029 Published 2026-04-08 Fixed in 18.8.9, 18.9.5 +1 CWE-79
TI-2026-04286 CVE-2026-4916 · GHSA-h92q-g5vv-9g2c

Missing Authorization in GitLab

Priority LOW 14

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with custom role permissions to de…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00361 Published 2026-04-08 Fixed in 18.8.9, 18.9.5 +1 CWE-862
Priority LOW 37

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user to invoke unintended server-side…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00433 Published 2026-04-08 Fixed in 18.8.9, 18.9.5 +1 CWE-749