Login Request a demo
GI
DevOps
GitLab
by GitLab · last CVE Oct 22, 2026
On CISA KEVExploited in the wildRansomware-linked
1,508
CVEs
5
On KEV
10.0
Max CVSS
41
New 30D
Vulnerabilities1,508In the news12Timeline
Severity mix
Critical 70High 356Medium 74Low 0
Severity
All severities500Critical70High356Medium74Low0
Exploitation
On CISA KEV5Exploited in the wild5
Watch

Add GitLab to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-5069
6.5
0%
Sep 26
An issue has been discovered in GitLab CE/EE affecting all versions from 17.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated…
Affected: 17.10.0 before 18.2.7; 17.10.0 before 18.2.7; 18.3.0 before 18.3.3; 18.3.0 before 18.3.3; 18.4.0; 18.4.0
CVE-2025-10867
6.5
0%
Sep 26
An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated…
Affected: 18.1.0 before 18.2.7; 18.1.0 before 18.2.7; 18.3.0 before 18.3.3; 18.3.0 before 18.3.3; 18.4.0; 18.4.0
CVE-2025-7337
6.5
0%
Sep 12
An issue has been discovered in GitLab CE/EE affecting all versions from 7.8 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed an authenticated…
Affected: 7.8.0 before 18.1.6; 7.8.0 before 18.1.6; 18.2.0 before 18.2.6; 18.2.0 before 18.2.6; 18.3.0 before 18.3.2; 18.3.0 before 18.3.2
CVE-2025-1250
6.5
0%
Sep 12
An issue has been discovered in GitLab CE/EE affecting all versions from 15.0 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed an authenticated…
Affected: 15.0.0 before 18.1.6; 15.0.0 before 18.1.6; 18.2.0 before 18.2.6; 18.2.0 before 18.2.6; 18.3.0 before 18.3.2; 18.3.0 before 18.3.2
CVE-2025-10094
6.5
0%
Sep 12
An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users…
Affected: 10.7.0 before 18.1.6; 10.7.0 before 18.1.6; 18.2.0 before 18.2.6; 18.2.0 before 18.2.6; 18.3.0 before 18.3.2; 18.3.0 before 18.3.2
CVE-2025-3601
6.5
0%
Aug 27
An issue has been discovered in GitLab CE/EE affecting all versions from 8.15 before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have could have allowed an…
Affected: 8.15.0 before 18.1.5; 8.15.0 before 18.1.5; 18.2.0 before 18.2.5; 18.2.0 before 18.2.5; 18.3.0; 18.3.0
CVE-2025-8770
6.5
0%
Aug 13
An issue has been discovered in GitLab EE affecting all versions from 18.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that could have allowed authenticated…
Affected: 18.0.0 before 18.0.6; 18.1.0 before 18.1.4; 18.2.0 before 18.2.2
CVE-2025-2937
6.5
0%
Aug 13
An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users…
Affected: 13.2.0 before 18.0.6; 13.2.0 before 18.0.6; 18.1.0 before 18.1.4; 18.1.0 before 18.1.4; 18.2.0 before 18.2.2; 18.2.0 before 18.2.2
CVE-2025-2614
6.5
0%
Aug 13
An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed an authenticated…
Affected: 11.6.0 before 18.0.6; 11.6.0 before 18.0.6; 18.1.0 before 18.1.4; 18.1.0 before 18.1.4; 18.2.0 before 18.2.2; 18.2.0 before 18.2.2
CVE-2024-10219
6.5
0%
Aug 13
An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have…
Affected: 15.6.0 before 18.0.6; 15.6.0 before 18.0.6; 18.1.0 before 18.1.4; 18.1.0 before 18.1.4; 18.2.0 before 18.2.2; 18.2.0 before 18.2.2
CVE-2025-3279
6.5
0%
Jun 26
An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated…
Affected: 10.7.0 before 17.11.5; 10.7.0 before 17.11.5; 18.0.0 before 18.0.3; 18.0.0 before 18.0.3; 18.1.0; 18.1.0
CVE-2025-5996
6.5
1%
Jun 12
An issue has been discovered in GitLab CE/EE affecting all versions from 2.1.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2
Affected: 2.1.0 before 17.10.8; 2.1.0 before 17.10.8; 17.11.0 before 17.11.4; 17.11.0 before 17.11.4; 18.0.0 before 18.0.2; 18.0.0 before 18.0.2
CVE-2025-0993
6.5
1%
May 22
An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1
Affected: before 17.10.7; before 17.10.7; 17.11.0 before 17.11.3; 17.11.0 before 17.11.3; 18.0.0; 18.0.0
CVE-2025-3111
6.5
0%
May 22
An issue has been discovered in GitLab CE/EE affecting all versions from 10.2 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1
Affected: 10.2.0 before 17.10.7; 10.2.0 before 17.10.7; 17.11.0 before 17.11.3; 17.11.0 before 17.11.3; 18.0.0; 18.0.0
CVE-2025-2853
6.5
0%
May 22
An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1
Affected: before 17.10.7; before 17.10.7; 17.11.0 before 17.11.3; 17.11.0 before 17.11.3; 18.0.0; 18.0.0
CVE-2025-0362
6.5
0%
Apr 10
An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4
Affected: 7.7.0 before 17.8.7; 7.7.0 before 17.8.7; 17.9.0 before 17.9.6; 17.9.0 before 17.9.6; 17.10.0 before 17.10.4; 17.10.0 before 17.10.4
CVE-2024-12619
6.5
0%
Mar 28
An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain…
Affected: 16.0.0 before 17.8.6; 16.0.0 before 17.8.6; 17.9.0 before 17.9.3; 17.9.0 before 17.9.3; 17.10.0; 17.10.0
CVE-2025-2867
6.5
0%
Mar 27
An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1
Affected: 17.8.0 before 17.8.6; 17.8.0 before 17.8.6; 17.9.0 before 17.9.3; 17.9.0 before 17.9.3; 17.10.0; 17.10.0
CVE-2025-0652
6.5
0%
Mar 13
An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from…
Affected: 16.9.0 before 17.7.7; 16.9.0 before 17.7.7; 17.8.0 before 17.8.5; 17.8.0 before 17.8.5; 17.9.0 before 17.9.2; 17.9.0 before 17.9.2
CVE-2024-13054
6.5
1%
Mar 13
An issue was discovered in GitLab CE/EE affecting all versions before 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2
Affected: before 17.7.7; before 17.7.7; 17.8.0 before 17.8.5; 17.8.0 before 17.8.5; 17.9.0 before 17.9.2; 17.9.0 before 17.9.2
CVE-2024-12379
6.5
1%
Feb 12
A denial of service vulnerability in GitLab CE/EE affecting all versions from 14.1 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to impact the…
Affected: 14.1.0 before 17.6.5; 14.1.0 before 17.6.5; 17.7.0 before 17.7.4; 17.7.0 before 17.7.4; 17.8.0 before 17.8.2; 17.8.0 before 17.8.2
CVE-2025-1072
6.5
1%
Feb 7
A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14.1 prior to 17.3.7, 17.4 prior to 17.4.4, and 17.5 prior to 17.5.2
Affected: 7.14.1 before 17.3.7; 7.14.1 before 17.3.7; 17.4.0 before 17.4.4; 17.5.0 before 17.5.2; 17.5.0 before 17.5.2; 17.7.0 before 17.7.3
CVE-2024-3976
6.5
1%
Feb 5
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to…
Affected: 14.0.0 before 16.9.7; 14.0.0 before 16.9.7; 16.10.0 before 16.10.5; 16.10.0 before 16.10.5; 16.11.0 before 16.11.2; 16.11.0 before 16.11.2
CVE-2025-0194
6.5
0%
Jan 8
Insertion of Sensitive Information into Externally-Accessible File or Directory in GitLab
Affected: 17.4 before 17.5.5; 17.6 before 17.6.3; 17.7 before 17.7.1
Page 2 of 2 · 74 total
12
The 500 most important CVEs for this product (exploited first, then by severity)