GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-18244Missing Authorization in GitLab
- CVE-2025-14562Incorrect Authorization in GitLab
- CVE-2026-3093Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-4672Missing Authorization in GitLab
- CVE-2026-6267Insertion of Sensitive Information Into Sent Data in GitLab
- CVE-2026-6336Incorrect Authorization in GitLab
- CVE-2026-12436Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab
- CVE-2026-13113Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab
- CVE-2026-14341Missing Authorization in GitLab
- CVE-2026-14351Exposure of Sensitive Information Through Metadata in GitLab
- CVE-2026-15077Improper Neutralization of Input Used for LLM Prompting in GitLab
- CVE-2026-15831Generation of Incorrect Security Tokens in GitLab
- CVE-2026-15975Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2026-16553Insufficiently Protected Credentials in GitLab
- CVE-2025-12506Use of Incorrectly-Resolved Name or Reference in GitLab
- CVE-2026-6352Incorrect Authorization in GitLab
- CVE-2026-6896Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-7492Missing Authorization in GitLab
- CVE-2026-8472Missing Authorization in GitLab
- CVE-2026-11827Insufficiently Protected Credentials in GitLab
- CVE-2026-13320Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-10086Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-0934Incorrect Authorization in GitLab
- CVE-2026-1606Improper Control of Generation of Code ('Code Injection') in GitLab
- CVE-2026-2238Missing Authorization in GitLab
- CVE-2026-3176Missing Authorization in GitLab
- CVE-2026-5309Authorization Bypass Through User-Controlled Key in GitLab
- CVE-2026-5796Incorrect Authorization in GitLab
- CVE-2026-5952Incorrect Authorization in GitLab
- CVE-2026-8330Insertion of Sensitive Information into Log File in GitLab