GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-6948Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-1754Missing Authentication for Critical Function in GitLab
- CVE-2025-2938Business Logic Errors in GitLab
- CVE-2025-3279Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-5315Missing Authorization in GitLab
- CVE-2025-5846Missing Authorization in GitLab
- CVE-2023-5600Missing Authorization in GitLab
- CVE-2024-4994Cross-Site Request Forgery (CSRF) in GitLab
- CVE-2024-4025Inefficient Regular Expression Complexity in GitLab
- CVE-2025-2443Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-5121Missing Authorization in GitLab
- CVE-2024-7586Insertion of Sensitive Information into Log File in GitLab
- CVE-2025-5982Insufficient Granularity of Access Control in GitLab
- CVE-2024-9512Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab
- CVE-2025-0673Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
- CVE-2025-5195Authorization Bypass Through User-Controlled Key in GitLab
- CVE-2025-1478Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-1516Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-2254Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-4278Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab
- CVE-2025-5996Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-1763Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-7803Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2024-9163User Interface (UI) Misrepresentation of Critical Information in GitLab
- CVE-2024-12093Improper Validation of Consistency within Input in GitLab
- CVE-2025-0605Weak Authentication in GitLab
- CVE-2025-0679Exposure of Private Personal Information to an Unauthorized Actor in GitLab
- CVE-2025-0993Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-1110Insufficient Granularity of Access Control in GitLab
- CVE-2025-2853Allocation of Resources Without Limits or Throttling in GitLab