GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-3114Uncontrolled Resource Consumption in GitLab
- CVE-2024-3958Improper Control of Generation of Code ('Code Injection') in GitLab
- CVE-2024-4207Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-5423Uncontrolled Resource Consumption in GitLab
- CVE-2024-7554Exposure of Sensitive Information to an Unauthorized Actor in GitLab
- CVE-2024-7610Uncontrolled Resource Consumption in GitLab
- CVE-2024-4210Uncontrolled Resource Consumption in GitLab
- CVE-2024-4784Authentication Bypass by Primary Weakness in GitLab
- CVE-2024-6329Improper Encoding or Escaping of Output in GitLab
- CVE-2024-7057Improper Access Control in GitLab
- CVE-2024-7047Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-0231Improper Control of Resource Identifiers ('Resource Injection') in GitLab
- CVE-2024-5067Exposure of Sensitive Information to an Unauthorized Actor in GitLab
- CVE-2024-7060Exposure of Sensitive Information to an Unauthorized Actor in GitLab
- CVE-2024-7091Exposure of Sensitive Information to an Unauthorized Actor in GitLab
- CVE-2024-6595Uncontrolled Search Path Element in GitLab
- CVE-2024-2880Improper Access Control in GitLab
- CVE-2024-5257Improper Access Control in GitLab
- CVE-2024-5470Improper Access Control in GitLab
- CVE-2024-6385Improper Access Control in GitLab
- CVE-2024-2177Improper Restriction of Rendered UI Layers or Frames in GitLab
- CVE-2024-1493Uncontrolled Resource Consumption in GitLab
- CVE-2024-1816Uncontrolled Resource Consumption in GitLab
- CVE-2024-2191Improper Access Control in GitLab
- CVE-2024-3115Exposure of Sensitive Information to an Unauthorized Actor in GitLab
- CVE-2024-3959Improper Authorization in GitLab
- CVE-2024-4011Improper Access Control in GitLab
- CVE-2024-4557Uncontrolled Resource Consumption in GitLab
- CVE-2024-4901Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-5655Improper Access Control in GitLab