GitLab CVEs
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-22229An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8.
- CVE-2021-22181A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an attacker to create a recursive pipeline relati
- CVE-2021-22175When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions
- CVE-2021-22216A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolle
- CVE-2021-22220An issue has been discovered in GitLab affecting all versions starting with 13.10.
- CVE-2021-22221An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions starting from 13.11.0 before
- CVE-2021-22219All versions of GitLab CE/EE starting from 9.5 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting fr
- CVE-2021-22217A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolle
- CVE-2021-22213A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access tok
- CVE-2021-22215An information disclosure vulnerability in GitLab EE versions 13.11 and later allowed a project owner to leak information about the members'
- CVE-2021-22218All versions of GitLab CE/EE starting from 12.8 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting f
- CVE-2021-22214When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all ve
- CVE-2021-22209An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.8.
- CVE-2021-22208An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7.
- CVE-2021-22206An issue has been discovered in GitLab affecting all versions starting from 11.6.
- CVE-2021-22210An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2.
- CVE-2021-22211An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.
- CVE-2021-22205An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9.
- CVE-2021-22199An issue has been discovered in GitLab affecting all versions starting with 12.9.
- CVE-2021-22190A path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT token
- CVE-2021-22202An issue has been discovered in GitLab CE/EE affecting all previous versions.
- CVE-2021-22200An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6.
- CVE-2021-22197An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when an authenticated us
- CVE-2021-22198An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user to delete incident me
- CVE-2021-22201An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9.
- CVE-2021-22203An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions starting from 13.9 befo
- CVE-2021-22196An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4.
- CVE-2021-22195Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system
- CVE-2021-22177Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource
- CVE-2021-22184An information disclosure issue in GitLab starting from version 12.8 allowed a user with access to the server logs to see sensitive informat