[ Vendor · 55 CVEs ]
GitLab
CVEs affecting GitLab published in the last 30 days, plus any GitLab CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-12664 | 22 Oct 2026 | CVSS 6.8 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under… | |
| CVE-2026-13319 | 22 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that… | |
| CVE-2026-14288 | 22 Oct 2026 | CVSS 3.1 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under… | |
| CVE-2026-15723 | 22 Oct 2026 | CVSS 8.2 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when… | |
| CVE-2026-16255 | 22 Oct 2026 | CVSS 5.9 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the… | |
| CVE-2026-112378 | 22 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under… | |
| CVE-2026-103515 | 22 Oct 2026 | CVSS 2.7 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an… | |
| CVE-2026-105711 | 22 Oct 2026 | CVSS 3.5 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when… | |
| CVE-2026-105777 | 22 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that… | |
| CVE-2026-110264 | 22 Oct 2026 | CVSS 10.0 | Critical Vulnerability in GitLab Community and Enterprise EditionsAn issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before… | |
| CVE-2026-112212 | 22 Oct 2026 | CVSS 7.5 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under… | |
| CVE-2026-112326 | 22 Oct 2026 | CVSS 3.1 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under… | |
| CVE-2026-82632 | 13 Oct 2026 | CVSS 3.1 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-84284 | 13 Oct 2026 | CVSS 5.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, 19.3 before 19.3.6, and 19.4 before 19.4.2 that… | |
| CVE-2026-85529 | 13 Oct 2026 | CVSS 5.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-92528 | 13 Oct 2026 | CVSS 4.2 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-92883 | 13 Oct 2026 | CVSS 8.7 | Critical Vulnerability in GitLab CE and EEGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-96893 | 13 Oct 2026 | CVSS 7.3 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-97229 | 13 Oct 2026 | CVSS 10.0 | Critical Vulnerability in GitLab CE and EEGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-9268 | 13 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-5954 | 13 Oct 2026 | CVSS 4.2 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-6567 | 13 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-78335 | 13 Oct 2026 | CVSS 4.2 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-7767 | 13 Oct 2026 | CVSS 5.8 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that… | |
| CVE-2026-81839 | 13 Oct 2026 | CVSS 7.7 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-14210 | 13 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that… | |
| CVE-2026-14552 | 13 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-14814 | 13 Oct 2026 | CVSS 8.2 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain… | |
| CVE-2026-16275 | 13 Oct 2026 | CVSS 5.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-16301 | 13 Oct 2026 | CVSS 8.5 | Critical Vulnerability in GitLab CE and EEGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-101168 | 13 Oct 2026 | CVSS 6.2 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-103549 | 13 Oct 2026 | CVSS 2.7 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-104661 | 13 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-105458 | 13 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-100755 | 13 Oct 2026 | CVSS 4.6 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-100104 | 13 Oct 2026 | CVSS 3.5 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… | |
| CVE-2026-1403 | 7 Oct 2026 | CVSS 6.5 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that when… | |
| CVE-2026-90970 | 2 Oct 2026 | CVSS 9.9 | GitLab AI GatewayGitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3… | Fix |
| CVE-2026-8937 | 29 Sep 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-84739 | 29 Sep 2026 | CVSS 8.7 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-4523 | 29 Sep 2026 | CVSS 3.7 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-10518 | 29 Sep 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-89078 | 24 Sep 2026 | CVSS 9.9 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-92470 | 24 Sep 2026 | CVSS 7.7 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-92529 | 24 Sep 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-92530 | 24 Sep 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-92628 | 24 Sep 2026 | CVSS 3.1 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-92874 | 24 Sep 2026 | CVSS 5.4 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-93577 | 24 Sep 2026 | CVSS 9.9 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under… | |
| CVE-2026-85706 | 12 Sep 2026 | CVSS 10.0 | Unauthenticated file read in GitLab through the commits APIGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before… | ExploitedFix |
| CVE-2026-87719 | 12 Sep 2026 | CVSS 9.9 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before… | Fix |
| CVE-2023-7028 | 12 Jan 2024 | CVSS 9.8 | GitLab Community and Enterprise Editions Improper Access ControlAn issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior… | Exploited |
| CVE-2021-39935 | 13 Dec 2021 | CVSS 7.5 | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF)An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4… | Exploited |
| CVE-2021-22175 | 11 Jun 2021 | CVSS 9.8 | GitLab Server-Side Request Forgery (SSRF)When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting… | Exploited |
| CVE-2021-22205 | 23 Apr 2021 | CVSS 10.0 | GitLab Community and Enterprise Editions Remote Code ExecutionAn issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were… | Exploited |