GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-3111Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-4979Insufficient Granularity of Access Control in GitLab
- CVE-2024-8973Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-0549Authentication Bypass Using an Alternate Path or Channel in GitLab
- CVE-2025-1278Insufficient Granularity of Access Control in GitLab
- CVE-2024-12244Missing Authorization in GitLab
- CVE-2025-0639Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-1908Business Logic Errors in GitLab
- CVE-2025-0362Improper Restriction of Rendered UI Layers or Frames in GitLab
- CVE-2025-2469Debug Messages Revealing Unnecessary Information in GitLab
- CVE-2024-11129Generation of Error Message Containing Sensitive Information in GitLab
- CVE-2025-1677Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-2408Insufficient Granularity of Access Control in GitLab
- CVE-2024-10307Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2024-12619Insufficient Granularity of Access Control in GitLab
- CVE-2025-2867Improper Control of Generation of Code ('Code Injection') in GitLab
- CVE-2024-9773Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
- CVE-2025-0811Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-2242Incorrect Authorization in GitLab
- CVE-2025-2255Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-7296Incorrect Authorization in GitLab
- CVE-2025-1257Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2024-8402Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
- CVE-2024-12380Generation of Error Message Containing Sensitive Information in GitLab
- CVE-2024-13054Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-0652Incorrect Authorization in GitLab
- CVE-2025-2045Incorrect Authorization in GitLab
- CVE-2025-1540Incorrect Authorization in GitLab
- CVE-2025-0555Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-10925Authorization Bypass Through User-Controlled Key in GitLab