GitLab Vulnerabilities and Affected Products
Vulnerabilities associated with GitLab Language Server.
Products
Clear product- GitLab1,037 vulnerabilities
- GitLab CE/EE23 vulnerabilities
- GitLab Community and Enterprise Editions13 vulnerabilities
- GitLab EE10 vulnerabilities
- GitLab Runner6 vulnerabilities
- Community and Enterprise Editions2 vulnerabilities
- DAST2 vulnerabilities
- GitLab Community Edition2 vulnerabilities
- GitLab Enterprise Edition2 vulnerabilities
- gitlab-shell2 vulnerabilities
- gitlab-vscode-extension2 vulnerabilities
- DAST API scanner1 vulnerability
- Gitaly1 vulnerability
- GitLab AI Gateway1 vulnerability
- GitLab Community Edition and GitLab Enterprise Edition1 vulnerability
- GitLab DAST API scanner1 vulnerability
- GitLab Language Server1 vulnerability
- GitLab Pages1 vulnerability
- GitLab VSCode Fork1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-8279HIGH | Missing Authentication for Critical Function in GitLab Language ServerInsufficient input validation within GitLab Language Server 7.6.0 and later before 7.30.0 allows arbitrary GraphQL query execution CWE-306Jul 28, 2025 | CVSS8.7v3.1 | EPSS0.415% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |