GI
DevOps
GitLab
On CISA KEVExploited in the wildRansomware-linked
1,508
CVEs
5
On KEV
10.0
Max CVSS
41
New 30D
Severity mix
Critical 70High 356Medium 74Low 0
Watch
Add GitLab to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-39944 | 7.1 | Dec 13 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from… Affected: 11.0.0 before 14.3.6; 11.0.0 before 14.3.6; 14.4.0 before 14.4.4; 14.4.0 before 14.4.4; 14.5.0 before 14.5.2; 14.5.0 before 14.5.2 |
| CVE-2020-26405 | 7.1 | Nov 17 | Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to save packages in arbitrary locations Affected: 12.8.0 before 13.3.9; 12.8.0 before 13.3.9; 13.4.0 before 13.4.5; 13.4.0 before 13.4.5; 13.5.0 before 13.5.2; 13.5.0 before 13.5.2 |
| CVE-2020-13325 | 7.1 | Sep 30 | A vulnerability was discovered in GitLab versions prior 13.1 Affected: 12.9.0 before 12.10.13; 13.0.0 before 13.0.8; 13.1.0 before 13.1.2 |
| CVE-2020-13293 | 7.1 | Aug 10 | In GitLab before 13.0.12, 13.1.6 and 13.2.3 using a branch with a hexadecimal name could override an existing hash Affected: 1.0.0 before 13.0.12; 13.1.0 before 13.1.6; 13.2.0 before 13.2.3 |
| CVE-2019-16170 | 7.1 | Sep 16 | An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x before 12.2.5 Affected: 11.6.0 before 12.0.9; 11.6.0 before 12.0.9; 12.1.0 before 12.1.9; 12.1.0 before 12.1.9; 12.2.0 before 12.2.5; 12.2.0 before 12.2.5 |
| CVE-2019-6793 | 7.0 | Sep 9 | An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1 Affected: 10.0.0 before 11.5.8; 11.6.0 before 11.6.6; 11.7.0 before 11.7.1 |
The 500 most important CVEs for this product (exploited first, then by severity)