GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-2256Improper Validation of Specified Quantity in Input in GitLab
- CVE-2025-6454Server-Side Request Forgery (SSRF) in GitLab
- CVE-2025-6769Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
- CVE-2025-7337Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-10094Improper Validation of Specified Quantity in Input in GitLab
- CVE-2025-2246Missing Authorization in GitLab
- CVE-2025-3601Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-4225Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-5101Improper Control of Generation of Code ('Code Injection') in GitLab
- CVE-2024-10219Incorrect Authorization in GitLab
- CVE-2024-12303Incorrect Privilege Assignment in GitLab
- CVE-2025-1477Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-2498Insufficient Granularity of Access Control in GitLab
- CVE-2025-2614Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-2937Inefficient Regular Expression Complexity in GitLab
- CVE-2025-5819Incorrect Permission Assignment for Critical Resource in GitLab
- CVE-2025-6186Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-7739Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-7734Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-8770Authorization Bypass Through User-Controlled Key in GitLab
- CVE-2025-8279Missing Authentication for Critical Function in GitLab Language Server
- CVE-2025-0765Incorrect Authorization in GitLab
- CVE-2025-1299Missing Authorization in GitLab
- CVE-2025-4976Exposure of Sensitive Information Due to Incompatible Policies in GitLab
- CVE-2025-7001Insufficient Granularity of Access Control in GitLab
- CVE-2025-4439Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-4700Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-3396Incorrect Authorization in GitLab
- CVE-2025-4972Incorrect Authorization in GitLab
- CVE-2025-6168Incorrect Authorization in GitLab