GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-9825Missing Authorization in GitLab
- CVE-2025-12983Memory Allocation with Excessive Size Value in GitLab
- CVE-2025-2615Insertion of Sensitive Information Into Sent Data in GitLab
- CVE-2025-6945Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
- CVE-2025-6171Missing Authorization in GitLab
- CVE-2025-7000Insertion of Sensitive Information Into Sent Data in GitLab
- CVE-2025-7736Incorrect Authorization in GitLab
- CVE-2025-11865Incorrect Authorization in GitLab
- CVE-2025-11990Improper Handling of URL Encoding (Hex Encoding) in GitLab
- CVE-2025-11702Missing Authorization in GitLab
- CVE-2025-6601Business Logic Errors in GitLab
- CVE-2025-10497Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-11971Incorrect Authorization in GitLab
- CVE-2025-11974Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-11447Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-11989Missing Authorization in GitLab
- CVE-2025-10004Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-11340Incorrect Authorization in GitLab
- CVE-2025-2934Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-8014Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-11042Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-5069Incorrect Ownership Assignment in GitLab
- CVE-2025-10868Business Logic Errors in GitLab
- CVE-2025-7691Privilege Defined With Unsafe Actions in GitLab
- CVE-2025-9642Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-9958Insertion of Sensitive Information Into Sent Data in GitLab
- CVE-2025-10858Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-10867Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-10871Missing Authorization in GitLab
- CVE-2025-1250Allocation of Resources Without Limits or Throttling in GitLab