Browse CVEs

MEDIUM 6.1 CVE-2025-2254 An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. Improper … GitLab 17.10.8 / 17.11.4+ Fix from $1,6002025-06-12 HIGH 7.5 CVE-2025-1478 An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A lack of… GitLab 17.10.7 / 17.11.3+ Fix from $1,9502025-06-12 HIGH 8.7 CVE-2025-1763 An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under sp… GitLab 17.9.7 / 17.10.5+ Fix from $1,9502025-05-30 HIGH 7.5 CVE-2024-9163 A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3 and 18.0 prior to 18.0.1 wh… GitLab 17.10.7 / 17.11.3+ Fix from $1,9502025-05-23 HIGH 7.5 CVE-2024-7803 An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A Discord… GitLab 17.10.7 / 17.11.3+ Fix from $1,9502025-05-23 MEDIUM 6.5 CVE-2025-0993 An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. This could allow an… GitLab 17.10.7 / 17.11.3+ Fix from $1,6002025-05-22 MEDIUM 6.8 CVE-2024-12093 An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Improper … GitLab 17.10.7 / 17.11.3+ Fix from $1,6002025-05-22 HIGH 7.5 CVE-2025-4979 An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. An attacker may be … GitLab 17.10.7 / 17.11.3+ Fix from $1,9502025-05-22 MEDIUM 6.5 CVE-2025-2853 An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A lack of proper va… GitLab 17.10.7 / 17.11.3+ Fix from $1,6002025-05-22 MEDIUM 6.5 CVE-2025-3111 An issue has been discovered in GitLab CE/EE affecting all versions from 10.2 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A lack of… GitLab 17.10.7 / 17.11.3+ Fix from $1,6002025-05-22 HIGH 7.5 CVE-2024-8973 An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 p… GitLab 17.9.8 / 17.10.6+ Fix from $1,9502025-05-09 HIGH 7.5 CVE-2025-1278 An issue has been discovered in GitLab CE/EE affecting all versions from 12.0 before 17.9.8, 17.10 before 17.10.6, and 17.11 before 17.11.2. Under ce… GitLab 17.9.8 / 17.10.6+ Fix from $1,9502025-05-09 MEDIUM 6.8 CVE-2025-0549 An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.3 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 p… GitLab 17.9.8 / 17.10.6+ Fix from $1,6002025-05-09 HIGH 7.7 CVE-2025-1908 An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account ta… GitLab 17.9.7 / 17.10.5+ Fix from $1,9502025-04-24 HIGH 7.5 CVE-2025-0639 An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions from 16.7 before 17.9.7, 17.10 b… GitLab 17.9.7 / 17.10.5+ Fix from $1,9502025-04-24 MEDIUM 6.5 CVE-2025-0362 An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certa… GitLab 17.8.7 / 17.9.6+ Fix from $1,6002025-04-10 MEDIUM 5.3 CVE-2025-2469 An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.9.6, and 17.10 before 17.10.4. The runtime profiling data of … GitLab 17.9.6 / 17.10.4+ Fix from $1,6002025-04-10 MEDIUM 5.3 CVE-2025-2408 An issue has been discovered in GitLab CE/EE affecting all versions from 13.12 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under cer… GitLab 17.8.7 / 17.9.6+ Fix from $1,6002025-04-10 HIGH 7.5 CVE-2025-1677 A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all up to 17.8.7, 17.9 prior to 17.9.6 and 17.10 prior to 17.10.4 A den… GitLab 17.9.6 / 17.10.4+ Fix from $1,9502025-04-10 HIGH 7.5 CVE-2024-11129 An issue has been discovered in GitLab EE affecting all versions from 17.1 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. This allows … GitLab 17.8.6 / 17.8.7+ Fix from $1,9502025-04-10 MEDIUM 6.5 CVE-2024-12619 An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing i… GitLab 17.8.6 / 17.9.3+ Fix from $1,6002025-03-28 MEDIUM 5.5 CVE-2024-10307 An issue has been discovered in GitLab EE/CE affecting all versions from 12.10 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. A malicio… GitLab 17.8.6 / 17.9.3+ Fix from $1,6002025-03-28 MEDIUM 6.5 CVE-2025-2867 An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.… GitLab 17.8.6 / 17.9.3+ Fix from $1,6002025-03-27 HIGH 8.8 CVE-2025-2242 An improper access control vulnerability in GitLab CE/EE affecting all versions from 17.4 prior to 17.8.6, 17.9 prior to 17.9.3, and 17.10 prior to 1… GitLab 17.8.6 / 17.9.3+ Fix from $1,9502025-03-27 MEDIUM 5.4 CVE-2025-0811 An issue has been discovered in GitLab CE/EE affecting all versions from 17.7 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. Improper r… GitLab 17.8.6 / 17.9.3+ Fix from $1,6002025-03-27 MEDIUM 5.4 CVE-2025-2255 An issue has been discovered in Gitlab EE/CE for AppSec affecting all versions from 13.5.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.… GitLab 17.8.6 / 17.9.3+ Fix from $1,6002025-03-27 HIGH 8.0 CVE-2024-9773 An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all vers… GitLab 17.8.6 / 17.9.3+ Fix from $1,9502025-03-27 HIGH 7.5 CVE-2025-1257 An issue was discovered in GitLab EE affecting all versions starting with 12.3 before 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2. A vulne… GitLab 17.7.7 / 17.8.5+ Fix from $1,9502025-03-13 HIGH 7.4 CVE-2024-8402 An issue was discovered in GitLab EE affecting all versions starting from 17.2 before 17.7.7, all versions starting from 17.8 before 17.8.5, all vers… GitLab 17.7.7 / 17.8.5+ Fix from $1,9502025-03-13 MEDIUM 6.5 CVE-2025-0652 An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions starting from 17.8 before 17.8.5, … GitLab 17.7.7 / 17.8.5+ Fix from $1,6002025-03-13