Filter
-Infinity
0

GitLabInfoleak

First published (updated )

GitLabAn issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all v…

First published (updated )

GitLabAn issue has been discovered in GitLab affecting all versions starting from 15.4 prior to 15.4.4, an…

First published (updated )

GitLabMalicious File Upload

First published (updated )

GitLabXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitLabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 prior to 15.3…

First published (updated )

GitLabAn improper access control issue in GitLab CE/EE affecting all versions from 11.3 prior to 15.3.5, 1…

First published (updated )

The RegisterCloud security explained: What’s left exposed?

First published (updated )

GitLabXSS

First published (updated )

GitLabAllocation of Resources Without Limits or Throttling in GitLab

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitLab Community EditionInsufficient Granularity of Access Control in GitLab

First published (updated )

GitLabSSRF

First published (updated )

GitLabSSRF

First published (updated )

GitLabIn Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could overri…

7.5
First published (updated )

GitLabAn info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitLab Community EditionIncorrect Authorization in GitLab

7.5
First published (updated )

GitLab Enterprise EditionImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

3.7
First published (updated )

GitLabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

8.7
First published (updated )

GitLab Community EditionImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

8.7
First published (updated )

GitLabImproper Control of Generation of Code ('Code Injection') in GitLab

EPSS
0.01%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitLab DAST API ScannerInfoleak

First published (updated )

GitLabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7…

7.5
First published (updated )

GitLabCSRF

8.1
First published (updated )

GitLabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 15.6.7…

7.5
First published (updated )

GitLabA lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7 bef…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitLabInsertion of Sensitive Information Into Sent Data in GitLab

First published (updated )

GitLabImproper Verification of Cryptographic Signature in GitLab

First published (updated )

GitLabIncorrect Privilege Assignment in GitLab

First published (updated )

GitLabGeneration of Error Message Containing Sensitive Information in GitLab

First published (updated )

GitLabURL Redirection to Untrusted Site ('Open Redirect') in GitLab

7.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203