GitLab CE / EE vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
569 matching records
- High8.7An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2.Check if you run itEPSS 0.31%Jun 12, 2025
- High8.7An issue has been discovered in GitLab CE/EE affecting all versions starting with 18.0 before 18.0.2.Check this weekEPSS 10.88%Jun 12, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 2.1.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2.Check if you run itEPSS 0.78%Jun 12, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryJun 8, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryJun 8, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryJun 8, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryJun 8, 2025
- UnknownJenkins gitlab_hook Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 93.21%Jun 7, 2025
- High8.7An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting alCheck if you run itEPSS 0.57%May 30, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check if you run itEPSS 0.51%May 23, 2025
- Low3.5A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3 and 18.0 prior to 18.0.1 where an attacker can cause a braCheck if you run itEPSS 0.40%May 23, 2025
- None0.0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryMay 23, 2025
- None0.0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryMay 23, 2025
- Medium6.8An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check if you run itEPSS 0.47%May 22, 2025
- Medium4.6An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check if you run itEPSS 0.32%May 22, 2025
- Medium4.3An issue has been discovered in GitLab CE/EE affecting all versions from 17.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check if you run itEPSS 0.33%May 22, 2025
- High7.5An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check if you run itEPSS 0.51%May 22, 2025
- Low2.7An issue has been discovered in GitLab CE/EE affecting all versions from 18.0 before 18.0.1.Check if you run itEPSS 0.32%May 22, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check if you run itEPSS 0.47%May 22, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 10.2 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check if you run itEPSS 0.46%May 22, 2025
- Medium4.9An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check if you run itEPSS 0.44%May 22, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryMay 21, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryMay 16, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2.Check if you run itEPSS 0.41%May 9, 2025
- Medium6.8An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.3 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2.Check if you run itEPSS 0.46%May 9, 2025