gitlab

1,423 tracked vulnerabilities.

CVE-2022-0489 LOW
GitLab 8.15.0-14.6.4 - Denial of Service via Math Feature Formula in Issue Comments
Apr 01, 2022
CVSS 3.5
EPSS 0.01
CVE-2022-0425 MEDIUM
GitLab 7.9-14.7.1 - Server-Side Request Forgery via Irker DNS Rebinding
Apr 01, 2022
CVSS 5.4
EPSS 0.01
CVE-2022-0390 MEDIUM
Gitlab CE/EE <14.5.4-14.7.1 - Info Disclosure
Apr 01, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-0373 MEDIUM
GitLab CE/EE <14.7.1 - Info Disclosure
Apr 01, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-0751 MEDIUM
GitLab 10.0-14.6.5 - Inaccurate Display of Snippet Files with Special Characters
Mar 28, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-0738 MEDIUM
GitLab <14.6.5-14.8.2 - Info Disclosure
Mar 28, 2022
CVSS 4.2
EPSS 0.01
CVE-2022-0735 CRITICAL NUCLEI
GitLab CE/EE <14.6.5-14.8.2 - Info Disclosure
Mar 28, 2022
CVSS 10.0
EPSS 0.13
CVE-2022-0549 MEDIUM
GitLab CE/EE <14.3.6, <14.4 before 14.4.4, <14.5 before 14.5.2 - Pr...
Mar 28, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-0488 LOW
GitLab CE/EE <8.10 - Info Disclosure
Mar 28, 2022
CVSS 3.5
EPSS 0.01
CVE-2022-0427 HIGH
GitLab 14.5-14.5.4 - Cross-Site Request Forgery via Jupyter Notebook HTML Attribute
Mar 28, 2022
CVSS 7.7
EPSS 0.01
CVE-2022-0371 MEDIUM
GitLab CE/EE <14.5.4-14.6.4-14.7.1 - Info Disclosure
Mar 28, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-0344 LOW
GitLab <14.5.4-14.6.4-14.7.1 - Info Disclosure
Mar 28, 2022
CVSS 3.1
EPSS 0.01
CVE-2022-0283 MEDIUM
GitLab < 14.5.4 - Open Redirect via Jira Integration
Mar 28, 2022
CVSS 4.7
EPSS 0.01
CVE-2022-0249 LOW
GitLab 12.0-14.5.3 - Server-Side Request Forgery via Shared Address Space
Mar 28, 2022
CVSS 3.1
EPSS 0.01
CVE-2022-0136 MEDIUM
GitLab 10.5-14.5.4, 14.6-14.6.4, 14.7-14.7.1 - Server-Side Request Forgery via Project Import
Mar 28, 2022
CVSS 5.4
EPSS 0.01
CVE-2022-0123 MEDIUM
GitLab <14.4.5, 14.5.0-14.5.3, 14.6.0-14.6.1 - Info Disclosure
Mar 28, 2022
CVSS 5.9
EPSS 0.00
CVE-2022-0244 HIGH
GitLab CE/EE <14.5 - Info Disclosure
Jan 18, 2022
CVSS 8.6
EPSS 0.02
CVE-2022-0172 MEDIUM
GitLab CE/EE <12.3 - Info Disclosure
Jan 18, 2022
CVSS 5.3
EPSS 0.01
CVE-2022-0154 HIGH
GitLab <14.4.5, <14.5.3, <14.6.2 - CSRF
Jan 18, 2022
CVSS 7.5
EPSS 0.00
CVE-2022-0152 MEDIUM
GitLab <14.4.5-14.6.2 - Info Disclosure
Jan 18, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-0151 MEDIUM
GitLab 12.10-14.4.4, 14.5.0-14.5.2, 14.6.0-14.6.1 - Denial of Service via Package Deletion Request
Jan 18, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-0125 MEDIUM
GitLab <14.4.5-14.6.2 - Privilege Escalation
Jan 18, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-0124 MEDIUM
GitLab <14.4.5, 14.5.0-14.5.3, 14.6.0-14.6.1 - Open Redirect
Jan 18, 2022
CVSS 4.3
EPSS 0.01
CVE-2022-0093 LOW
GitLab <14.4.5, 14.5.0-14.5.3, 14.6.0-14.6.1 - Info Disclosure
Jan 18, 2022
CVSS 3.5
EPSS 0.01
CVE-2022-0090 MEDIUM
GitLab <14.4.5, 14.5.0-14.5.3, 14.6.0-14.6.1 - Improper Privilege Management via Git Sub-Command Replacement References
Jan 18, 2022
CVSS 6.5
EPSS 0.01
Products
gitlab 1,408 GitLab 154 gitlab-shell 5 dynamic_application_security_testing_analyzer 4 runner 3 gitlab-vscode-extension 2 GitLab AI Gateway 1 dast_api_scanner 1 gitaly 1 gitlab_runner 1 language_server 1 omnibus 1
Quick Filters
Critical CVEs With Exploits In CISA KEV