GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-1101Improper Validation of Specified Quantity in Input in GitLab
- CVE-2026-1516Improper Control of Generation of Code ('Code Injection') in GitLab
- CVE-2026-1752Incorrect Authorization in GitLab
- CVE-2026-2104Authorization Bypass Through User-Controlled Key in GitLab
- CVE-2026-2619Incorrect Authorization in GitLab
- CVE-2026-4332Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-4916Missing Authorization in GitLab
- CVE-2026-5173Exposed Dangerous Method or Function in GitLab
- CVE-2026-2370Improper Handling of Parameters in GitLab
- CVE-2025-13078Improper Validation of Specified Quantity in Input in GitLab
- CVE-2025-13436Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-14595Missing Authorization in GitLab
- CVE-2026-1724Missing Authentication for Critical Function in GitLab
- CVE-2026-2745Authentication Bypass Using an Alternate Path or Channel in GitLab
- CVE-2026-2726Incorrect Authorization in GitLab
- CVE-2026-2973Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-2995Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab
- CVE-2026-3857Cross-Site Request Forgery (CSRF) in GitLab
- CVE-2026-3988Inefficient Algorithmic Complexity in GitLab
- CVE-2026-4363Incorrect Authorization in GitLab
- CVE-2026-1182Improper Removal of Sensitive Information Before Storage or Transfer in GitLab
- CVE-2025-12555Incorrect Authorization in GitLab
- CVE-2025-12576Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-12697Improper Encoding or Escaping of Output in GitLab
- CVE-2025-12704Missing Authorization in GitLab
- CVE-2025-13690Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-13929Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-14513Improper Validation of Specified Quantity in Input in GitLab
- CVE-2026-0602Authentication Bypass Using an Alternate Path or Channel in GitLab
- CVE-2026-1069Uncontrolled Recursion in GitLab