GI
DevOps
GitLab
On CISA KEVExploited in the wildRansomware-linked
1,508
CVEs
5
On KEV
10.0
Max CVSS
41
New 30D
Severity mix
Critical 70High 356Medium 74Low 0
Watch
Add GitLab to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7803 | 7.5 | May 23 | An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1 Affected: 11.6.0 before 17.10.7; 11.6.0 before 17.10.7; 17.11.0 before 17.11.3; 17.11.0 before 17.11.3; 18.0.0; 18.0.0 |
| CVE-2025-4979 | 7.5 | May 22 | An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1 Affected: before 17.10.7; before 17.10.7; 17.11.0 before 17.11.3; 17.11.0 before 17.11.3; 18.0.0; 18.0.0 |
| CVE-2025-1278 | 7.5 | May 9 | An issue has been discovered in GitLab CE/EE affecting all versions from 12.0 before 17.9.8, 17.10 before 17.10.6, and 17.11 before 17.11.2 Affected: 12.0.0 before 17.9.8; 12.0.0 before 17.9.8; 17.10.0 before 17.10.6; 17.10.0 before 17.10.6; 17.11.0 before 17.11.2; 17.11.0 before 17.11.2 |
| CVE-2024-8973 | 7.5 | May 9 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2 Affected: 17.1.0 before 17.9.8; 17.1.0 before 17.9.8; 17.10.0 before 17.10.6; 17.10.0 before 17.10.6; 17.11.0 before 17.11.2; 17.11.0 before 17.11.2 |
| CVE-2025-0639 | 7.5 | Apr 24 | An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions from 16.7 before 17.9.7, 17.10 before 17.10.5, and 17.11… Affected: 16.7.0 before 17.9.7; 16.7.0 before 17.9.7; 17.10.0 before 17.10.5; 17.10.0 before 17.10.5; 17.11.0; 17.11.0 |
| CVE-2025-1677 | 7.5 | Apr 10 | A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all up to 17.8.7, 17.9 prior to 17.9.6 and 17.10 prior to 17.10.4 A denial of service could occur… Affected: through 17.8.7; through 17.8.7; 17.9.0 before 17.9.6; 17.9.0 before 17.9.6; 17.10.0 before 17.10.4; 17.10.0 before 17.10.4 |
| CVE-2024-11129 | 7.5 | Apr 10 | An issue has been discovered in GitLab EE affecting all versions from 17.1 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4 Affected: 17.1.0 before 17.8.6; 17.1.0 before 17.8.7; 17.9.0 before 17.9.6; 17.9.0 before 17.9.6; 17.10.0 before 17.10.4; 17.10.0 before 17.10.4 |
| CVE-2025-1257 | 7.5 | Mar 13 | An issue was discovered in GitLab EE affecting all versions starting with 12.3 before 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2 Affected: 12.3.0 before 17.7.7; 17.8.0 before 17.8.5; 17.9.0 before 17.9.2 |
| CVE-2024-12380 | 7.5 | Mar 13 | An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9… Affected: 11.5.0 before 17.7.7; 11.5.0 before 17.7.7; 17.8.0 before 17.8.5; 17.8.0 before 17.8.5; 17.9.0 before 17.9.2; 17.9.0 before 17.9.2 |
| CVE-2024-7102 | 7.5 | Feb 13 | An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.0 which allows an attacker to trigger a pipeline as another user under certain… Affected: 16.4.0 before 17.5.0; 16.4.0 before 17.5.0 |
| CVE-2025-1212 | 7.5 | Feb 12 | An information disclosure vulnerability in GitLab CE/EE affecting all versions from 8.3 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send… Affected: 8.3.0 before 17.6.5; 8.3.0 before 17.6.5; 17.7.0 before 17.7.4; 17.7.0 before 17.7.4; 17.8.0 before 17.8.2; 17.8.0 before 17.8.2 |
| CVE-2025-1042 | 7.5 | Feb 12 | An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker… Affected: 15.7.0 before 17.6.5; 17.7.0 before 17.7.4; 17.8.0 before 17.8.2 |
| CVE-2024-2878 | 7.5 | Feb 5 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to… Affected: 15.7.0 before 16.9.7; 15.7.0 before 16.9.7; 16.10.0 before 16.10.5; 16.10.0 before 16.10.5; 16.11.0 before 16.11.2; 16.11.0 before 16.11.2 |
| CVE-2024-9631 | 7.5 | Feb 5 | An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2,… Affected: 13.6.0 before 17.2.9; 13.6.0 before 17.2.9; 17.3.0 before 17.3.5; 17.3.0 before 17.3.5; 17.4.0 before 17.4.2; 17.4.0 before 17.4.2 |
| CVE-2023-6386 | 7.5 | Feb 5 | A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 prior to 16.8.2 which allows an… Affected: 15.11.0 before 16.6.7; 15.11.0 before 16.6.7; 16.7.0 before 16.7.5; 16.7.0 before 16.7.5; 16.8.0 before 16.8.2; 16.8.0 before 16.8.2 |
| CVE-2024-8233 | 7.5 | Dec 12 | An issue has been discovered in GitLab CE/EE affecting all versions from 9.4 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2 Affected: 9.4.0 before 17.4.6; 9.4.0 before 17.4.6; 17.5.0 before 17.5.4; 17.5.0 before 17.5.4; 17.6.0 before 17.6.2; 17.6.0 before 17.6.2 |
| CVE-2024-8237 | 7.5 | Nov 26 | A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 12.6 prior to 17.4.5, 17.5 prior to 17.5.3, and 17.6 prior to 17.6.1 Affected: 12.6.0 before 17.4.5; 12.6.0 before 17.4.5; 17.5.0 before 17.5.3; 17.5.0 before 17.5.3; 17.6.0; 17.6.0 |
| CVE-2024-8177 | 7.5 | Nov 26 | An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.4.5, starting from 17.5 prior to 17.5.3, starting from 17.6 prior to 17.6.1 which… Affected: 15.6.0 before 17.4.5; 15.6.0 before 17.4.5; 17.5.0 before 17.5.3; 17.5.0 before 17.5.3; 17.6.0; 17.6.0 |
| CVE-2024-11828 | 7.5 | Nov 26 | A denial of service (DoS) condition was discovered in GitLab CE/EE affecting all versions from 13.2.4 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1 Affected: 13.2.4 before 17.4.5; 13.2.4 before 17.4.5; 17.5.0 before 17.5.3; 17.5.0 before 17.5.3; 17.6.0; 17.6.0 |
| CVE-2024-11669 | 7.5 | Nov 26 | An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1 Affected: 16.9.8 before 17.4.5; 16.9.8 before 17.4.5; 17.5.0 before 17.5.3; 17.5.0 before 17.5.3; 17.6.0; 17.6.0 |
| CVE-2024-9633 | 7.5 | Nov 14 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.3 before 17.4.2, all versions starting from 17.5 before 17.5.4, all versions starting from… Affected: 16.3.0 before 17.4.2; 16.3.0 before 17.4.2; 17.5.0 before 17.5.4; 17.5.0 before 17.5.4; 17.6.0 before 17.6.2; 17.6.0 before 17.6.2 |
| CVE-2024-8124 | 7.5 | Sep 12 | An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.1.7, starting from 17.2 prior to 17.2.5, starting from 17.3 prior to 17.3.2 which… Affected: 16.4.0 before 17.1.7; 16.4.0 before 17.1.7; 17.2.0 before 17.2.5; 17.2.0 before 17.2.5; 17.3.0 before 17.3.2; 17.3.0 before 17.3.2 |
| CVE-2024-4660 | 7.5 | Sep 12 | An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3… Affected: 11.2.0 before 17.1.7; 17.2.0 before 17.2.5; 17.3.0 before 17.3.2 |
| CVE-2024-2800 | 7.5 | Aug 8 | ReDoS flaw in RefMatcher when matching branch names using wildcards in GitLab EE/CE affecting all versions from 11.3 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to… Affected: 11.3.0 before 17.0.6; 11.3.0 before 17.0.6; 17.1.0 before 17.1.4; 17.1.0 before 17.1.4; 17.2.0 before 17.2.2; 17.2.0 before 17.2.2 |
| CVE-2024-6329 | 7.5 | Aug 8 | An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2,… Affected: 8.16.0 before 17.0.6; 8.16.0 before 17.0.6; 17.1.0 before 17.1.4; 17.1.0 before 17.1.4; 17.2.0 before 17.2.2; 17.2.0 before 17.2.2 |
| CVE-2024-6323 | 7.5 | Jun 27 | Improper authorization in global search in GitLab EE affecting all versions from 16.11 prior to 16.11.5 and 17.0 prior to 17.0.3 and 17.1 prior to 17.1.1 allows an attacker leak… Affected: 16.11.0 before 16.11.5; 17.0.0 before 17.0.3; 17.1.0 |
| CVE-2024-2829 | 7.5 | Apr 25 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.5 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from… Affected: 12.5.0 before 16.9.6; 12.5.0 before 16.9.6; 16.10.0 before 16.10.4; 16.10.0 before 16.10.4; 16.11.0; 16.11.0 |
| CVE-2023-3904 | 7.5 | Dec 15 | An issue has been discovered in GitLab EE affecting all versions starting before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before… Affected: before 16.4.4; 16.5 before 16.5.4; 16.6 before 16.6.2 |
| CVE-2023-5995 | 7.5 | Dec 1 | An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6… Affected: 16.2.0 before 16.4.3; 16.5.0 before 16.5.3; 16.6.0 |
| CVE-2023-5226 | 7.5 | Dec 1 | An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1 Affected: before 16.4.3; before 16.4.3; 16.5.0 before 16.5.3; 16.5.0 before 16.5.3; 16.6.0; 16.6.0 |
| CVE-2023-4379 | 7.5 | Nov 9 | Incorrect Authorization in GitLab Affected: 15.3 before 16.2.8; 16.3 before 16.3.5; 16.4 before 16.4.1 |
| CVE-2023-5106 | 7.5 | Oct 2 | An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could… Affected: 13.12 before 16.2.8; 16.3.0 before 16.3.5; 16.4.0 |
| CVE-2023-3413 | 7.5 | Sep 29 | An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4… Affected: 16.2 before 16.2.8; 16.2 before 16.2.8; 16.3.0 before 16.3.5; 16.3.0 before 16.3.5; 16.4.0; 16.4.0 |
| CVE-2023-3917 | 7.5 | Sep 29 | Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cause pipelines to… Affected: before 16.2.8; before 16.2.8; 16.3.0 before 16.3.5; 16.3.0 before 16.3.5; 16.4.0; 16.4.0 |
| CVE-2023-4647 | 7.5 | Sep 1 | An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3… Affected: 15.2.0 before 16.1.5; 15.2.0 before 16.1.5; 16.2 before 16.2.5; 16.2 before 16.2.5; 16.3.0; 16.3.0 |
| CVE-2023-4011 | 7.5 | Aug 2 | An issue has been discovered in GitLab EE affecting all versions from 15.11 prior to 16.2.2 which allows an attacker to spike the resource consumption resulting in DoS Affected: 15.11 before 16.2.2; 15.11 before 16.2.2 |
| CVE-2023-3994 | 7.5 | Aug 2 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2… Affected: 9.3 before 16.0.8; 9.3 before 16.0.8; 16.1 before 16.1.3; 16.1 before 16.1.3; 16.2 before 16.2.2; 16.2 before 16.2.2 |
| CVE-2023-3993 | 7.5 | Aug 2 | An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2… Affected: 14.3 before 16.0.8; 14.3 before 16.0.8; 16.1 before 16.1.3; 16.1 before 16.1.3; 16.2 before 16.2.2; 16.2 before 16.2.2 |
| CVE-2023-3900 | 7.5 | Aug 2 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2 Affected: 16.1 before 16.1.3; 16.1 before 16.1.3; 16.2 before 16.2.2; 16.2 before 16.2.2 |
| CVE-2023-3364 | 7.5 | Aug 2 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from… Affected: 8.14 before 16.0.8; 8.14 before 16.0.8; 16.1 before 16.1.3; 16.1 before 16.1.3; 16.2 before 16.2.2; 16.2 before 16.2.2 |
| CVE-2023-0632 | 7.5 | Aug 2 | An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2… Affected: 15.2 before 16.0.8; 15.2 before 16.0.8; 16.1 before 16.1.3; 16.1 before 16.1.3; 16.2 before 16.2.2; 16.2 before 16.2.2 |
| CVE-2023-3424 | 7.5 | Jul 13 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.3 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from… Affected: 10.3.0 before 15.11.10; 10.3.0 before 15.11.10; 16.0.0 before 16.0.6; 16.0.0 before 16.0.6; 16.1.0 before 16.1.1; 16.1.0 before 16.1.1 |
| CVE-2023-2199 | 7.5 | Jun 7 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.0 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from… Affected: 12.0.0 before 15.10.8; 12.0.0 before 15.10.8; 15.11.0 before 15.11.7; 15.11.0 before 15.11.7; 16.0.0 before 16.0.2; 16.0.0 before 16.0.2 |
| CVE-2023-2198 | 7.5 | Jun 7 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.7 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from… Affected: 8.7.0 before 15.10.8; 8.7.0 before 15.10.8; 15.11.0 before 15.11.7; 15.11.0 before 15.11.7; 16.0.0 before 16.0.2; 16.0.0 before 16.0.2 |
| CVE-2023-0121 | 7.5 | Jun 7 | A denial of service issue was discovered in GitLab CE/EE affecting all versions starting from 13.2.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions… Affected: 13.2.4 before 15.10.8; 13.2.4 before 15.10.8; 15.11.0 before 15.11.7; 15.11.0 before 15.11.7; 16.0.0 before 16.0.2; 16.0.0 before 16.0.2 |
| CVE-2023-2132 | 7.5 | Jun 6 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from… Affected: 15.4.0 before 15.10.8; 15.4.0 before 15.10.8; 15.11.0 before 15.11.7; 15.11.0 before 15.11.7; 16.0.0 before 16.0.2; 16.0.0 before 16.0.2 |
| CVE-2023-2825 | 7.5 | May 26 | An issue has been discovered in GitLab CE/EE affecting only version 16.0.0 Affected: 16.0.0; 16.0.0 |
| CVE-2018-17455 | 7.5 | Apr 15 | An issue was discovered in GitLab Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1 Affected: before 11.1.7; before 11.1.7; 11.2.0 before 11.2.4; 11.2.0 before 11.2.4; 11.3.0; 11.3.0 |
| CVE-2018-17449 | 7.5 | Apr 15 | An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1 Affected: before 11.1.7; before 11.1.7; 11.2.0 before 11.2.4; 11.2.0 before 11.2.4; 11.3.0; 11.3.0 |
| CVE-2018-15472 | 7.5 | Apr 15 | An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1 Affected: before 11.1.7; before 11.1.7; 11.2.0 before 11.2.4; 11.2.0 before 11.2.4; 11.3.0; 11.3.0 |
The 500 most important CVEs for this product (exploited first, then by severity)