Filter
AND

GitLabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 14.10.…

First published (updated )

GitLabIncorrect Authorization in GitLab CE/EE 13.4 or above allows a user with guest membership in a proje…

First published (updated )

GitLabImproper authorization in GitLab EE affecting all versions since 13.4 allowed a user who previously …

First published (updated )

GitLabXSS

First published (updated )

GitLabAn issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messag…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitLabA potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x (>=13.4 …

First published (updated )

GitLabInfoleak

First published (updated )

GitLabThe Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operati…

7.6
First published (updated )

GitLabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9. A specially…

8.2
First published (updated )

GitLabPath Traversal

8.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitLabPath Traversal

7.1
First published (updated )

GitLabAn issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expre…

First published (updated )

GitLabAn issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required CODEOW…

First published (updated )

GitLabCSRF

First published (updated )

GitLabInsufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker to…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitLabPrivate group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is move…

First published (updated )

GitLabA vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above allows u…

First published (updated )

GitLabCertain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE starting…

First published (updated )

GitLabAn issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. I…

First published (updated )

GitLabXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitLabXSS

8.7
First published (updated )

GitLabAn issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. S…

First published (updated )

GitLabAn issue has been discovered in GitLab affecting versions prior to 13.2.10, 13.3.7 and 13.4.2: Lack …

First published (updated )

GitLabMembership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3…

First published (updated )

GitLabIn GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper authorization checks allow a non-me…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitLabCommand Injection, Path Traversal

First published (updated )

GitLabImproper group membership validation when deleting a user account in GitLab >=7.12 allows a user to …

First published (updated )

GitLabXSS

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203