GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-0475Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-8186Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-3303Improper Neutralization of Input Used for LLM Prompting in GitLab
- CVE-2025-1198Insufficient Session Expiration in GitLab
- CVE-2024-7102Execution with Unnecessary Privileges in GitLab
- CVE-2024-8266Execution with Unnecessary Privileges in GitLab
- CVE-2024-9870Unintended Proxy or Intermediary ('Confused Deputy') in GitLab
- CVE-2025-0516Incorrect Authorization in GitLab
- CVE-2024-12379Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-0376Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-1212Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
- CVE-2025-1042Files or Directories Accessible to External Parties in GitLab
- CVE-2024-10383Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab VSCode Fork
- CVE-2025-1072Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2024-2878Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2024-3976Missing Authorization in GitLab
- CVE-2024-5528Incomplete Comparison with Missing Factors in GitLab
- CVE-2024-9631Inefficient Algorithmic Complexity in GitLab
- CVE-2024-6356Incorrect User Management in GitLab
- CVE-2024-1539Missing Authorization in GitLab
- CVE-2023-6386Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2023-6195Server-Side Request Forgery (SSRF) in GitLab
- CVE-2024-1211Cross-Site Request Forgery (CSRF) in GitLab
- CVE-2025-0290Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
- CVE-2024-11931Insufficient Granularity of Access Control in GitLab
- CVE-2025-0314Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-13041Incorrect User Management in GitLab
- CVE-2024-6324Inefficient Algorithmic Complexity in GitLab
- CVE-2024-12431Missing Authorization in GitLab
- CVE-2025-0194Insertion of Sensitive Information into Externally-Accessible File or Directory in GitLab