CVE Program partner

GitLab

GitLab Inc.

API
CVEs, 365 days4491,780 all time, 331 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationGitLab Inc.
RoleCNA
TypeVendor, Researcher
Reports tomitre
ScopeThe GitLab application, any project hosted on GitLab.com in a public repository, and any vulnerabilities discovered by GitLab that are not in another CNA’s scope.
Advisorieshttps://gitlab.com/gitlab-org/cves

Latest CVEs · RSS

  • CVE-2026-96425 2026-10-16 · CVSS 5.5
    Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus
  • CVE-2026-96424 2026-10-16 · CVSS 7.8
    Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read arbitrary file as root over DBus
  • CVE-2026-18516 2026-10-16 · CVSS 9.6
    An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripti
  • CVE-2026-90821 2026-10-16 · CVSS 5.4
    An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS
  • CVE-2026-109119 2026-10-16 · CVSS 8.8
    Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in Rdiffweb allows authenticated users to elevate their privileg
  • CVE-2026-109118 2026-10-16 · CVSS 4.6
    Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve to
  • CVE-2026-5954 2026-10-13 · CVSS 4.2
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain co
  • CVE-2026-6567 2026-10-13 · CVSS 4.3
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain co
  • CVE-2026-7767 2026-10-13 · CVSS 5.8
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain c
  • CVE-2026-9268 2026-10-13 · CVSS 2.7
    GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condi
  • CVE-2026-14210 2026-10-13 · CVSS 4.3
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain c
  • CVE-2026-14552 2026-10-13 · CVSS 4.3
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain co
  • CVE-2026-14814 2026-10-13 · CVSS 8.2
    GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,
  • CVE-2026-16275 2026-10-13 · CVSS 5.3
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain co
  • CVE-2026-16301 2026-10-13 · CVSS 8.5
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain co
  • CVE-2026-78335 2026-10-13 · CVSS 4.2
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain co
  • CVE-2026-81839 2026-10-13 · CVSS 7.7
    GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condi
  • CVE-2026-82632 2026-10-13 · CVSS 3.1
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain co
  • CVE-2026-84284 2026-10-13 · CVSS 5.3
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, all 19.3 versions, and 19.4 before 19.4.2 that, under certain co
  • CVE-2026-85529 2026-10-13 · CVSS 5.3
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain co
  • CVE-2026-92528 2026-10-13 · CVSS 4.2
    GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain cond
  • CVE-2026-92883 2026-10-13 · CVSS 8.7
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain c
  • CVE-2026-97229 2026-10-13 · CVSS 10.0
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain co
  • CVE-2026-96893 2026-10-13 · CVSS 7.3
    GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condi
  • CVE-2026-100104 2026-10-13 · CVSS 3.5
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain co

All CVE Program partners