GitLab CE / EE vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
14 matching records
- High8.6Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service VulnerabilityPatch nowKEVEPSS 0.82%Oct 28, 2026
- Critical10.0CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLabPatch nowKEVEPSS 27.30%Oct 12, 2026
- Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityPatch nowKEVEPSS 97.36%Sep 11, 2026
- Critical9.1GitLab GitLab Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.15%Aug 17, 2026
- UnknownJenkins gitlab_hook Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 93.21%Jun 7, 2025
- UnknownGitLab GitLab Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.61%Jan 15, 2025
- Critical9.8GitLab Community and Enterprise Editions Improper Access Control VulnerabilityPatch nowKEVEPSS 94.46%Jan 12, 2024
- UnknownGitLab GitLab Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 27.81%Dec 12, 2023
- UnknownGitLab CE/EE 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2 Unauthenticated User EnumerationPatch nowKEVEPSS 80.00%Nov 14, 2023
- Unknownsonarsource sonarqube Missing Authentication for Critical FunctionPatch nowKEVEPSS 15.97%Nov 13, 2023
- High7.5GitLab GitLab Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 71.64%May 26, 2023
- High7.5GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 36.14%Dec 13, 2021
- Critical9.8GitLab Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 53.37%Jun 11, 2021
- Critical10.0GitLab Community and Enterprise Editions Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.73%Apr 23, 2021
Sort
14 records