GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-5430Improper Access Control in GitLab
- CVE-2024-6323Improper Isolation or Compartmentalization in GitLab
- CVE-2024-5469Uncontrolled Resource Consumption in GitLab
- CVE-2024-1736Uncontrolled Resource Consumption in GitLab
- CVE-2024-1495Uncontrolled Resource Consumption in GitLab
- CVE-2024-1963Uncontrolled Resource Consumption in GitLab
- CVE-2024-4201Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-5318Missing Authorization in GitLab
- CVE-2023-6502Inefficient Regular Expression Complexity in GitLab
- CVE-2023-7045Cross-Site Request Forgery (CSRF) in GitLab
- CVE-2024-1947Improper Handling of Highly Compressed Data (Data Amplification) in GitLab
- CVE-2024-5258Authorization Bypass Through User-Controlled Key in GitLab
- CVE-2024-2874Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2024-4835Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2023-6682Inefficient Regular Expression Complexity in GitLab
- CVE-2023-6688Inefficient Regular Expression Complexity in GitLab
- CVE-2024-2454Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2024-2651Inefficient Regular Expression Complexity in GitLab
- CVE-2024-4539Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2024-4597Cross-Site Request Forgery (CSRF) in GitLab
- CVE-2024-4024Authentication Bypass by Assumed-Immutable Data in GitLab
- CVE-2024-4006Incorrect Authorization in GitLab
- CVE-2024-1347Authentication Bypass by Spoofing in GitLab
- CVE-2024-2434Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
- CVE-2024-2829Inefficient Regular Expression Complexity in GitLab
- CVE-2023-6489Inefficient Regular Expression Complexity in GitLab
- CVE-2023-6678Inefficient Regular Expression Complexity in GitLab
- CVE-2024-2279Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-3092Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2023-6371Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab