GitLab CE / EE vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
569 matching records
- Medium5.3An issue has been discovered in GitLab CE/EE affecting all versions from 12.0 before 17.9.8, 17.10 before 17.10.6, and 17.11 before 17.11.2.Check if you run itEPSS 0.39%May 9, 2025
- None0.0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryMay 9, 2025
- None0.0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryApr 30, 2025
- UnknownRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryApr 30, 2025
- Medium4.3An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting allCheck if you run itEPSS 0.31%Apr 24, 2025
- Medium6.5An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions from 16.7 before 17.9.7, 17.10 before 17.10.5, and 17.11 beforeCheck if you run itEPSS 0.46%Apr 24, 2025
- High7.7An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versionsCheck if you run itEPSS 0.39%Apr 24, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryApr 23, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryApr 17, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() If track_pfn_copy() fails, we already addCheck if you run itEPSS 0.21%Apr 16, 2025
- UnknownGitLab GitLab Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.61%Jan 15, 2025
- Critical9.8GitLab Community and Enterprise Editions Improper Access Control VulnerabilityPatch nowKEVEPSS 94.46%Jan 12, 2024
- UnknownGitLab GitLab Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 27.81%Dec 12, 2023
- UnknownGitLab CE/EE 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2 Unauthenticated User EnumerationPatch nowKEVEPSS 80.00%Nov 14, 2023
- Unknownsonarsource sonarqube Missing Authentication for Critical FunctionPatch nowKEVEPSS 15.97%Nov 13, 2023
- High7.5GitLab GitLab Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 71.64%May 26, 2023
- High7.5GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 36.14%Dec 13, 2021
- Critical9.8GitLab Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 53.37%Jun 11, 2021
- Critical10.0GitLab Community and Enterprise Editions Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.73%Apr 23, 2021