GI
DevOps
GitLab
On CISA KEVExploited in the wildRansomware-linked
1,508
CVEs
5
On KEV
10.0
Max CVSS
41
New 30D
Severity mix
Critical 70High 356Medium 74Low 0
Watch
Add GitLab to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-3922 | 6.5 | Apr 22 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 12.4 before 18.9.6; 18.10 before 18.10.4; 18.11 before 18.11.1 |
| CVE-2025-6016 | 6.5 | Apr 22 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 9.2 before 18.9.6; 18.10 before 18.10.4; 18.11 before 18.11.1 |
| CVE-2026-1660 | 6.5 | Apr 22 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 12.3 before 18.9.6; 18.10 before 18.10.4; 18.11 before 18.11.1 |
| CVE-2026-1101 | 6.5 | Apr 8 | Improper Validation of Specified Quantity in Input in GitLab Affected: 18.2 before 18.8.9; 18.9 before 18.9.5; 18.10 before 18.10.3 |
| CVE-2025-13078 | 6.5 | Mar 25 | Improper Validation of Specified Quantity in Input in GitLab Affected: 16.10 before 18.8.7; 18.9 before 18.9.3; 18.10 before 18.10.1 |
| CVE-2025-13436 | 6.5 | Mar 25 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 13.7 before 18.8.7; 18.9 before 18.9.3; 18.10 before 18.10.1 |
| CVE-2025-12576 | 6.5 | Mar 11 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 9.3 before 18.7.6; 18.8 before 18.8.6; 18.9 before 18.9.2 |
| CVE-2025-13690 | 6.5 | Mar 11 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 16.11 before 18.7.6; 18.8 before 18.8.6; 18.9 before 18.9.2 |
| CVE-2026-1230 | 6.5 | Mar 11 | Use of Incorrectly-Resolved Name or Reference in GitLab Affected: 1.0 before 18.7.6; 18.8 before 18.8.6; 18.9 before 18.9.2 |
| CVE-2026-2845 | 6.5 | Feb 25 | An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an authenticated… Affected: 11.2.0 before 18.7.5; 11.2.0 before 18.7.5; 18.8.0 before 18.8.5; 18.8.0 before 18.8.5; 18.9.0; 18.9.0 |
| CVE-2025-3525 | 6.5 | Feb 25 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.0 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have, under certain… Affected: 9.0.0 before 18.7.5; 9.0.0 before 18.7.5; 18.8.0 before 18.8.5; 18.8.0 before 18.8.5; 18.9.0; 18.9.0 |
| CVE-2026-1387 | 6.5 | Feb 11 | GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated… Affected: 15.6.0 before 18.6.6; 18.7.0 before 18.7.4; 18.8.0 before 18.8.4 |
| CVE-2025-13335 | 6.5 | Jan 22 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that under certain circumstances could… Affected: 17.1.0 before 18.6.4; 17.1.0 before 18.6.4; 18.7.0 before 18.7.2; 18.7.0 before 18.7.2; 18.8.0 before 18.8.2; 18.8.0 before 18.8.2 |
| CVE-2025-13781 | 6.5 | Jan 9 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated… Affected: 18.5.0 before 18.5.5; 18.6.0 before 18.6.3; 18.7.0 |
| CVE-2025-10569 | 6.5 | Jan 9 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated… Affected: 8.3.0 before 18.5.5; 8.3.0 before 18.5.5; 18.6.0 before 18.6.3; 18.6.0 before 18.6.3; 18.7.0; 18.7.0 |
| CVE-2025-4097 | 6.5 | Dec 11 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated… Affected: 11.10.0 before 18.4.6; 11.10.0 before 18.4.6; 18.5.0 before 18.5.4; 18.5.0 before 18.5.4; 18.6.0 before 18.6.2; 18.6.0 before 18.6.2 |
| CVE-2025-14157 | 6.5 | Dec 11 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 6.3 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated… Affected: 6.3.0 before 18.4.6; 6.3.0 before 18.4.6; 18.5.0 before 18.5.4; 18.5.0 before 18.5.4; 18.6.0 before 18.6.2; 18.6.0 before 18.6.2 |
| CVE-2025-7449 | 6.5 | Nov 26 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an authenticated… Affected: 8.3.0 before 18.4.5; 8.3.0 before 18.4.5; 18.5.0 before 18.5.3; 18.5.0 before 18.5.3; 18.6.0; 18.6.0 |
| CVE-2025-12653 | 6.5 | Nov 26 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that under specific conditions could have… Affected: 18.3.0 before 18.4.5; 18.3.0 before 18.4.5; 18.5.0 before 18.5.3; 18.5.0 before 18.5.3; 18.6.0; 18.6.0 |
| CVE-2025-9825 | 6.5 | Nov 21 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 to 18.2.8, 18.3 before 18.3.4, and 18.4 before 18.4.2 that could have allowed authenticated users… Affected: 13.7.0 before 18.2.8; 13.7.0 before 18.2.8; 18.3.0 before 18.3.4; 18.3.0 before 18.3.4; 18.4.0 before 18.4.2; 18.4.0 before 18.4.2 |
| CVE-2025-12983 | 6.5 | Nov 15 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated… Affected: 16.9.0 before 18.3.6; 16.9.0 before 18.3.6; 18.4.0 before 18.4.4; 18.4.0 before 18.4.4; 18.5.0 before 18.5.2; 18.5.0 before 18.5.2 |
| CVE-2025-2615 | 6.5 | Nov 15 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that could have allowed a blocked user… Affected: 16.7.0 before 18.3.6; 16.7.0 before 18.3.6; 18.4.0 before 18.4.4; 18.4.0 before 18.4.4; 18.5.0 before 18.5.2; 18.5.0 before 18.5.2 |
| CVE-2025-6601 | 6.5 | Oct 27 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.3, and 18.5 before 18.5.1 that under certain conditions could have allowed authenticated… Affected: 18.4.0 before 18.4.3; 18.5.0 |
| CVE-2025-11974 | 6.5 | Oct 27 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an… Affected: 11.7.0 before 18.3.5; 11.7.0 before 18.3.5; 18.4.0 before 18.4.3; 18.4.0 before 18.4.3; 18.5.0; 18.5.0 |
| CVE-2025-11971 | 6.5 | Oct 27 | GitLab has remediated an issue in GitLab EE affecting all versions from 10.6 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated… Affected: 10.6.0 before 18.3.5; 18.4.0 before 18.4.3; 18.5.0 |
| CVE-2025-2934 | 6.5 | Oct 9 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 5.2 prior to 18.2.8, 18.3 prior to 18.3.4, and 18.4 prior to 18.4.2 that could have allowed an… Affected: 5.2.0 before 18.2.8; 5.2.0 before 18.2.8; 18.3.0 before 18.3.4; 18.3.0 before 18.3.4; 18.4.0 before 18.4.2; 18.4.0 before 18.4.2 |
| CVE-2025-5069 | 6.5 | Sep 26 | An issue has been discovered in GitLab CE/EE affecting all versions from 17.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated… Affected: 17.10.0 before 18.2.7; 17.10.0 before 18.2.7; 18.3.0 before 18.3.3; 18.3.0 before 18.3.3; 18.4.0; 18.4.0 |
| CVE-2025-10867 | 6.5 | Sep 26 | An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated… Affected: 18.1.0 before 18.2.7; 18.1.0 before 18.2.7; 18.3.0 before 18.3.3; 18.3.0 before 18.3.3; 18.4.0; 18.4.0 |
| CVE-2025-7337 | 6.5 | Sep 12 | An issue has been discovered in GitLab CE/EE affecting all versions from 7.8 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed an authenticated… Affected: 7.8.0 before 18.1.6; 7.8.0 before 18.1.6; 18.2.0 before 18.2.6; 18.2.0 before 18.2.6; 18.3.0 before 18.3.2; 18.3.0 before 18.3.2 |
| CVE-2025-1250 | 6.5 | Sep 12 | An issue has been discovered in GitLab CE/EE affecting all versions from 15.0 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed an authenticated… Affected: 15.0.0 before 18.1.6; 15.0.0 before 18.1.6; 18.2.0 before 18.2.6; 18.2.0 before 18.2.6; 18.3.0 before 18.3.2; 18.3.0 before 18.3.2 |
| CVE-2025-10094 | 6.5 | Sep 12 | An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users… Affected: 10.7.0 before 18.1.6; 10.7.0 before 18.1.6; 18.2.0 before 18.2.6; 18.2.0 before 18.2.6; 18.3.0 before 18.3.2; 18.3.0 before 18.3.2 |
| CVE-2025-3601 | 6.5 | Aug 27 | An issue has been discovered in GitLab CE/EE affecting all versions from 8.15 before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have could have allowed an… Affected: 8.15.0 before 18.1.5; 8.15.0 before 18.1.5; 18.2.0 before 18.2.5; 18.2.0 before 18.2.5; 18.3.0; 18.3.0 |
| CVE-2025-8770 | 6.5 | Aug 13 | An issue has been discovered in GitLab EE affecting all versions from 18.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that could have allowed authenticated… Affected: 18.0.0 before 18.0.6; 18.1.0 before 18.1.4; 18.2.0 before 18.2.2 |
| CVE-2025-2937 | 6.5 | Aug 13 | An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users… Affected: 13.2.0 before 18.0.6; 13.2.0 before 18.0.6; 18.1.0 before 18.1.4; 18.1.0 before 18.1.4; 18.2.0 before 18.2.2; 18.2.0 before 18.2.2 |
| CVE-2025-2614 | 6.5 | Aug 13 | An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed an authenticated… Affected: 11.6.0 before 18.0.6; 11.6.0 before 18.0.6; 18.1.0 before 18.1.4; 18.1.0 before 18.1.4; 18.2.0 before 18.2.2; 18.2.0 before 18.2.2 |
| CVE-2024-10219 | 6.5 | Aug 13 | An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have… Affected: 15.6.0 before 18.0.6; 15.6.0 before 18.0.6; 18.1.0 before 18.1.4; 18.1.0 before 18.1.4; 18.2.0 before 18.2.2; 18.2.0 before 18.2.2 |
| CVE-2025-3279 | 6.5 | Jun 26 | An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated… Affected: 10.7.0 before 17.11.5; 10.7.0 before 17.11.5; 18.0.0 before 18.0.3; 18.0.0 before 18.0.3; 18.1.0; 18.1.0 |
| CVE-2025-5996 | 6.5 | Jun 12 | An issue has been discovered in GitLab CE/EE affecting all versions from 2.1.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2 Affected: 2.1.0 before 17.10.8; 2.1.0 before 17.10.8; 17.11.0 before 17.11.4; 17.11.0 before 17.11.4; 18.0.0 before 18.0.2; 18.0.0 before 18.0.2 |
| CVE-2025-0993 | 6.5 | May 22 | An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1 Affected: before 17.10.7; before 17.10.7; 17.11.0 before 17.11.3; 17.11.0 before 17.11.3; 18.0.0; 18.0.0 |
| CVE-2025-3111 | 6.5 | May 22 | An issue has been discovered in GitLab CE/EE affecting all versions from 10.2 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1 Affected: 10.2.0 before 17.10.7; 10.2.0 before 17.10.7; 17.11.0 before 17.11.3; 17.11.0 before 17.11.3; 18.0.0; 18.0.0 |
| CVE-2025-2853 | 6.5 | May 22 | An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1 Affected: before 17.10.7; before 17.10.7; 17.11.0 before 17.11.3; 17.11.0 before 17.11.3; 18.0.0; 18.0.0 |
| CVE-2025-0362 | 6.5 | Apr 10 | An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4 Affected: 7.7.0 before 17.8.7; 7.7.0 before 17.8.7; 17.9.0 before 17.9.6; 17.9.0 before 17.9.6; 17.10.0 before 17.10.4; 17.10.0 before 17.10.4 |
| CVE-2024-12619 | 6.5 | Mar 28 | An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain… Affected: 16.0.0 before 17.8.6; 16.0.0 before 17.8.6; 17.9.0 before 17.9.3; 17.9.0 before 17.9.3; 17.10.0; 17.10.0 |
| CVE-2025-2867 | 6.5 | Mar 27 | An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1 Affected: 17.8.0 before 17.8.6; 17.8.0 before 17.8.6; 17.9.0 before 17.9.3; 17.9.0 before 17.9.3; 17.10.0; 17.10.0 |
| CVE-2025-0652 | 6.5 | Mar 13 | An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from… Affected: 16.9.0 before 17.7.7; 16.9.0 before 17.7.7; 17.8.0 before 17.8.5; 17.8.0 before 17.8.5; 17.9.0 before 17.9.2; 17.9.0 before 17.9.2 |
| CVE-2024-13054 | 6.5 | Mar 13 | An issue was discovered in GitLab CE/EE affecting all versions before 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2 Affected: before 17.7.7; before 17.7.7; 17.8.0 before 17.8.5; 17.8.0 before 17.8.5; 17.9.0 before 17.9.2; 17.9.0 before 17.9.2 |
| CVE-2024-12379 | 6.5 | Feb 12 | A denial of service vulnerability in GitLab CE/EE affecting all versions from 14.1 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to impact the… Affected: 14.1.0 before 17.6.5; 14.1.0 before 17.6.5; 17.7.0 before 17.7.4; 17.7.0 before 17.7.4; 17.8.0 before 17.8.2; 17.8.0 before 17.8.2 |
| CVE-2025-1072 | 6.5 | Feb 7 | A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14.1 prior to 17.3.7, 17.4 prior to 17.4.4, and 17.5 prior to 17.5.2 Affected: 7.14.1 before 17.3.7; 7.14.1 before 17.3.7; 17.4.0 before 17.4.4; 17.5.0 before 17.5.2; 17.5.0 before 17.5.2; 17.7.0 before 17.7.3 |
| CVE-2024-3976 | 6.5 | Feb 5 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to… Affected: 14.0.0 before 16.9.7; 14.0.0 before 16.9.7; 16.10.0 before 16.10.5; 16.10.0 before 16.10.5; 16.11.0 before 16.11.2; 16.11.0 before 16.11.2 |
| CVE-2025-0194 | 6.5 | Jan 8 | Insertion of Sensitive Information into Externally-Accessible File or Directory in GitLab Affected: 17.4 before 17.5.5; 17.6 before 17.6.3; 17.7 before 17.7.1 |
The 500 most important CVEs for this product (exploited first, then by severity)