GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-10712Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-11379Incorrect Authorization in GitLab
- CVE-2026-12053Insertion of Sensitive Information into Log File in GitLab
- CVE-2026-12635Reliance on Reverse DNS Resolution for a Security-Critical Action in GitLab
- CVE-2026-1500Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2026-3553Incorrect Authorization in GitLab
- CVE-2026-6269Incorrect Authorization in GitLab
- CVE-2026-6277Incorrect Authorization in GitLab
- CVE-2026-6976Authorization Bypass Through User-Controlled Key in GitLab
- CVE-2026-7250Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2026-8589Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-9204Server-Side Request Forgery (SSRF) in GitLab
- CVE-2026-9694Improper Neutralization of Substitution Characters in GitLab
- CVE-2026-10087Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-10733Improper Restriction of Rendered UI Layers or Frames in GitLab
- CVE-2026-9807Incorrect Authorization in GitLab
- CVE-2026-1402Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2026-2601Missing Authorization in GitLab
- CVE-2026-4868Authorization Bypass Through User-Controlled Key in GitLab
- CVE-2026-5296Missing Authorization in GitLab
- CVE-2026-6713Incorrect Authorization in GitLab
- CVE-2026-8716Use of Incorrectly-Resolved Name or Reference in GitLab
- CVE-2025-12669Improper Control of Generation of Code ('Code Injection') in GitLab
- CVE-2025-13874Authorization Bypass Through User-Controlled Key in GitLab
- CVE-2025-14869Improper Validation of Specified Quantity in Input in GitLab
- CVE-2025-14870Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2026-1184Deserialization of Untrusted Data in GitLab
- CVE-2026-1322Business Logic Errors in GitLab
- CVE-2026-1338Authorization Bypass Through User-Controlled Key in GitLab
- CVE-2026-1659Allocation of Resources Without Limits or Throttling in GitLab