GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-2900Missing Authorization in GitLab
- CVE-2026-3073Authorization Bypass Through User-Controlled Key in GitLab
- CVE-2026-3074Authorization Bypass Through User-Controlled Key in GitLab
- CVE-2026-3160Unintended Proxy or Intermediary ('Confused Deputy') in GitLab
- CVE-2026-3607Access Control Check Implemented After Asset is Accessed in GitLab
- CVE-2026-4524Authentication Bypass Using an Alternate Path or Channel in GitLab
- CVE-2026-4527Cross-Site Request Forgery (CSRF) in GitLab
- CVE-2026-6063Authorization Bypass Through User-Controlled Key in GitLab
- CVE-2026-6073Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-6335Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-6883Missing Authorization in GitLab
- CVE-2026-7377Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-7471Server-Side Request Forgery (SSRF) in GitLab
- CVE-2026-7481Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-8280Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2026-8144Missing Authorization in GitLab
- CVE-2026-3254Improper Restriction of Rendered UI Layers or Frames in GitLab
- CVE-2026-4922Cross-Site Request Forgery (CSRF) in GitLab
- CVE-2025-0186Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-3922Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-6016Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-9957Incorrect Authorization in GitLab
- CVE-2026-1660Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2026-5262Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-5377Incorrect Authorization in GitLab
- CVE-2026-5816Improper Resolution of Path Equivalence in GitLab
- CVE-2026-6515Insufficient Session Expiration in GitLab
- CVE-2025-9484Missing Authorization in GitLab
- CVE-2025-12664Improper Validation of Specified Quantity in Input in GitLab
- CVE-2026-1092Improper Validation of Specified Quantity in Input in GitLab