GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-1751Missing Authorization in GitLab
- CVE-2025-13928Incorrect Authorization in GitLab
- CVE-2025-13927Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2026-0723Unchecked Return Value in GitLab
- CVE-2026-1102Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-13335Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
- CVE-2025-11224Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-3950Exposure of Private Personal Information to an Unauthorized Actor in GitLab
- CVE-2025-9222Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-10569Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-11246Insufficient Granularity of Access Control in GitLab
- CVE-2025-13772Missing Authorization in GitLab
- CVE-2025-13761Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-13781Missing Authorization in GitLab
- CVE-2025-12029Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-12734Improper Encoding or Escaping of Output in GitLab
- CVE-2025-4097Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-8405Improper Encoding or Escaping of Output in GitLab
- CVE-2025-11247Authorization Bypass Through User-Controlled Key in GitLab
- CVE-2025-11984Authentication Bypass Using an Alternate Path or Channel in GitLab
- CVE-2025-12562Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-12716Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2025-13978Generation of Error Message Containing Sensitive Information in GitLab
- CVE-2025-14157Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2024-9183Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab
- CVE-2025-6195Direct Request ('Forced Browsing') in GitLab
- CVE-2025-7449Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-12571Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2025-12653Authentication Bypass by Spoofing in GitLab
- CVE-2025-13611Insertion of Sensitive Information into Log File in GitLab