Browse CVEs

HIGH 7.5 CVE-2026-12053 GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.1 that under certain conditions could have allowed a user to… GitLab Mitigation only Fix from $1,9502026-06-25 HIGH 7.5 CVE-2026-1725 GitLab has remediated an issue in GitLab CE/EE affecting versions from 18.9 before 18.9.1 that could have under certain conditions, allowed an unauth… GitLab Mitigation only Fix from $1,9502026-02-25 HIGH 8.7 CVE-2024-1451EPSS 51% An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile pa… GitLab Mitigation only Fix from $1,9502024-02-22 MEDIUM 6.5 CVE-2023-6564 An issue has been discovered in GitLab EE Premium and Ultimate affecting versions 16.4.3, 16.5.3, and 16.6.1. In projects using subgroups to define w… GitLab Mitigation only Fix from $1,6002024-02-08 HIGH 7.5 CVE-2023-2825EPSS 72% An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability … GitLab Mitigation only Fix from $1,9502023-05-26 HIGH 8.0 CVE-2022-4092 An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. It was possible to create a malicious README page … GitLab No fix yet Fix from $1,9502023-01-26 MEDIUM 5.4 CVE-2022-1948 An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of input used in quick actions all… GitLab Mitigation only Fix from $1,6002022-07-28 HIGH 8.8 CVE-2019-12430 An issue was discovered in GitLab Community and Enterprise Edition 11.11. A specially crafted payload would allow an authenticated malicious user to … GitLab Mitigation only Fix from $1,9502020-03-10 MEDIUM 5.3 CVE-2019-20143 An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.6. It has Incorrect Access Control. GitLab No fix yet Fix from $1,6002020-01-13 HIGH 7.2 CVE-2019-5473 An authentication issue was discovered in GitLab that allowed a bypass of email verification. This was addressed in GitLab 12.1.2 and 12.0.4. GitLab No fix yet Fix from $1,9502019-09-09 MEDIUM 6.1 CVE-2017-0923 Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site … GitLab Mitigation only Fix from $1,6002018-03-21 MEDIUM 6.5 CVE-2017-11437 GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to us… GitLab Mitigation only Fix from $1,6002017-08-02 MEDIUM 6.3 CVE-2017-11438 GitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.11, 9.1.8, 9.2.8 allow an authenticated user with the ability to create a group … GitLab Mitigation only Fix from $1,6002017-08-02