# GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6.](https://agentprime.io/advisories/CVE-2021-22246.md)
  `CVE-2021-22246` · CVE record: GitLab GitLab · CVSS 7.7 High · Not analysed yet · Published 20 Aug 2021
- [Under very specific conditions a user could be impersonated using Gitlab shell.](https://agentprime.io/advisories/CVE-2021-22254.md)
  `CVE-2021-22254` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 20 Aug 2021
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.11…](https://agentprime.io/advisories/CVE-2021-22234.md)
  `CVE-2021-22234` · CVE record: GitLab GitLab · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2021
- [An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0.](https://agentprime.io/advisories/CVE-2021-22241.md)
  `CVE-2021-22241` · CVE record: GitLab GitLab · CVSS 8.7 High · Not analysed yet · Published 5 Aug 2021
- [GitLab: An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a…](https://agentprime.io/advisories/CVE-2021-22233.md)
  `CVE-2021-22233` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 7 Jul 2021
- [GitLab: A cross-site request forgery vulnerability in the GraphQL API in GitLab since version…](https://agentprime.io/advisories/CVE-2021-22224.md)
  `CVE-2021-22224` · CVE record: GitLab GitLab · CVSS 7.1 High · Not analysed yet · Published 7 Jul 2021
- [GitLab: Insufficient input sanitization in markdown in GitLab version 13.11 and up allows an…](https://agentprime.io/advisories/CVE-2021-22225.md)
  `CVE-2021-22225` · CVE record: GitLab GitLab · CVSS 4.7 Medium · Not analysed yet · Published 7 Jul 2021
- [Improper code rendering while rendering merge requests could be exploited to submit malicious code.](https://agentprime.io/advisories/CVE-2021-22230.md)
  `CVE-2021-22230` · CVE record: GitLab GitLab · CVSS 4.9 Medium · Not analysed yet · Published 7 Jul 2021
- [GitLab: A reflected cross-site script vulnerability in GitLab before versions 13.11.6…](https://agentprime.io/advisories/CVE-2021-22227.md)
  `CVE-2021-22227` · CVE record: GitLab GitLab · CVSS 6.1 Medium · Not analysed yet · Published 7 Jul 2021
- [GitLab: A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that…](https://agentprime.io/advisories/CVE-2021-22231.md)
  `CVE-2021-22231` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 7 Jul 2021
- [GitLab: Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9…](https://agentprime.io/advisories/CVE-2021-22223.md)
  `CVE-2021-22223` · CVE record: GitLab GitLab · CVSS 6.1 Medium · Not analysed yet · Published 6 Jul 2021
- [GitLab: An issue has been discovered in GitLab affecting all versions before 13.11.6…](https://agentprime.io/advisories/CVE-2021-22228.md)
  `CVE-2021-22228` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 6 Jul 2021
- [GitLab: Under certain conditions, some users were able to push to protected branches that were…](https://agentprime.io/advisories/CVE-2021-22226.md)
  `CVE-2021-22226` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 6 Jul 2021
- [GitLab: HTML injection was possible via the full name field before versions 13.11.6, 13.12.6…](https://agentprime.io/advisories/CVE-2021-22232.md)
  `CVE-2021-22232` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 6 Jul 2021
- [An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8.](https://agentprime.io/advisories/CVE-2021-22229.md)
  `CVE-2021-22229` · CVE record: GitLab GitLab · CVSS 5.9 Medium · Not analysed yet · Published 6 Jul 2021
- [GitLab: A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8…](https://agentprime.io/advisories/CVE-2021-22181.md)
  `CVE-2021-22181` · CVE record: GitLab GitLab · CVSS 7.7 High · Not analysed yet · Published 11 Jun 2021
- [Server-side request forgery in GitLab](https://agentprime.io/advisories/CVE-2021-22175.md)
  `CVE-2021-22175` · CVE record: GitLab GitLab · CVSS 6.8 Medium · Critical (KEV) · In CISA KEV · EPSS 0.53 · Not analysed yet · Published 11 Jun 2021 · Tags: Server-side request forgery (SSRF)
- [GitLab: A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2…](https://agentprime.io/advisories/CVE-2021-22216.md)
  `CVE-2021-22216` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 8 Jun 2021
- [An issue has been discovered in GitLab affecting all versions starting with 13.10.](https://agentprime.io/advisories/CVE-2021-22220.md)
  `CVE-2021-22220` · CVE record: GitLab GitLab · CVSS 6.1 Medium · Not analysed yet · Published 8 Jun 2021
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before…](https://agentprime.io/advisories/CVE-2021-22221.md)
  `CVE-2021-22221` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 8 Jun 2021
- [GitLab: All versions of GitLab CE/EE starting from 9.5 before 13.10.5…](https://agentprime.io/advisories/CVE-2021-22219.md)
  `CVE-2021-22219` · CVE record: GitLab GitLab · CVSS 4.4 Medium · Not analysed yet · Published 8 Jun 2021
- [GitLab: A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2…](https://agentprime.io/advisories/CVE-2021-22217.md)
  `CVE-2021-22217` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 8 Jun 2021
- [GitLab: A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since…](https://agentprime.io/advisories/CVE-2021-22213.md)
  `CVE-2021-22213` · CVE record: GitLab GitLab · CVSS 8.8 High · Not analysed yet · Published 8 Jun 2021
- [GitLab: An information disclosure vulnerability in GitLab EE versions 13.11 and later allowed a…](https://agentprime.io/advisories/CVE-2021-22215.md)
  `CVE-2021-22215` · CVE record: GitLab GitLab · CVSS 7.5 High · Not analysed yet · Published 8 Jun 2021
- [GitLab: All versions of GitLab CE/EE starting from 12.8 before 13.10.5…](https://agentprime.io/advisories/CVE-2021-22218.md)
  `CVE-2021-22218` · CVE record: GitLab GitLab · CVSS 2.6 Low · Not analysed yet · Published 8 Jun 2021
- [GitLab: When requests to the internal network for webhooks are enabled…](https://agentprime.io/advisories/CVE-2021-22214.md)
  `CVE-2021-22214` · CVE record: GitLab GitLab · CVSS 6.8 Medium · EPSS 0.28 · Not analysed yet · Published 8 Jun 2021
- [An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.8.](https://agentprime.io/advisories/CVE-2021-22209.md)
  `CVE-2021-22209` · CVE record: GitLab GitLab · CVSS 7.5 High · Not analysed yet · Published 6 May 2021
- [An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7.](https://agentprime.io/advisories/CVE-2021-22208.md)
  `CVE-2021-22208` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 6 May 2021
- [An issue has been discovered in GitLab affecting all versions starting from 11.6.](https://agentprime.io/advisories/CVE-2021-22206.md)
  `CVE-2021-22206` · CVE record: GitLab GitLab · CVSS 6.8 Medium · Not analysed yet · Published 6 May 2021
- [An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2.](https://agentprime.io/advisories/CVE-2021-22210.md)
  `CVE-2021-22210` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 6 May 2021
- [An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.](https://agentprime.io/advisories/CVE-2021-22211.md)
  `CVE-2021-22211` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 5 May 2021
- [Code injection in GitLab](https://agentprime.io/advisories/CVE-2021-22205.md)
  `CVE-2021-22205` · CVE record: GitLab GitLab · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 23 Apr 2021 · Tags: Code injection
- [An issue has been discovered in GitLab affecting all versions starting with 12.9.](https://agentprime.io/advisories/CVE-2021-22199.md)
  `CVE-2021-22199` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 22 Apr 2021
- [GitLab: A path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could…](https://agentprime.io/advisories/CVE-2021-22190.md)
  `CVE-2021-22190` · CVE record: GitLab GitLab · CVSS 8.5 High · Not analysed yet · Published 12 Apr 2021
- [An issue has been discovered in GitLab CE/EE affecting all previous versions.](https://agentprime.io/advisories/CVE-2021-22202.md)
  `CVE-2021-22202` · CVE record: GitLab GitLab · CVSS 2.4 Low · Not analysed yet · Published 2 Apr 2021
- [An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6.](https://agentprime.io/advisories/CVE-2021-22200.md)
  `CVE-2021-22200` · CVE record: GitLab GitLab · CVSS 5.9 Medium · Not analysed yet · Published 2 Apr 2021
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6…](https://agentprime.io/advisories/CVE-2021-22197.md)
  `CVE-2021-22197` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 2 Apr 2021
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above…](https://agentprime.io/advisories/CVE-2021-22198.md)
  `CVE-2021-22198` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 2 Apr 2021
- [An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9.](https://agentprime.io/advisories/CVE-2021-22201.md)
  `CVE-2021-22201` · CVE record: GitLab GitLab · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Apr 2021
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9…](https://agentprime.io/advisories/CVE-2021-22203.md)
  `CVE-2021-22203` · CVE record: GitLab GitLab · CVSS 7.5 High · Not analysed yet · Published 2 Apr 2021
- [An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4.](https://agentprime.io/advisories/CVE-2021-22196.md)
  `CVE-2021-22196` · CVE record: GitLab GitLab · CVSS 6.3 Medium · Not analysed yet · Published 2 Apr 2021
- [GitLab: Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above…](https://agentprime.io/advisories/CVE-2021-22177.md)
  `CVE-2021-22177` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 1 Apr 2021
- [GitLab: An information disclosure issue in GitLab starting from version 12.8 allowed a user with…](https://agentprime.io/advisories/CVE-2021-22184.md)
  `CVE-2021-22184` · CVE record: GitLab GitLab · CVSS 6.2 Medium · Not analysed yet · Published 26 Mar 2021
- [An issue has been discovered in GitLab affecting all versions starting from 13.4.](https://agentprime.io/advisories/CVE-2021-22180.md)
  `CVE-2021-22180` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 26 Mar 2021
- [In all versions of GitLab, marshalled session keys were being stored in Redis.](https://agentprime.io/advisories/CVE-2021-22194.md)
  `CVE-2021-22194` · CVE record: GitLab GitLab · CVSS 5.7 Medium · Not analysed yet · Published 26 Mar 2021
- [GitLab: Improper authorization in GitLab 12.8+ allows a guest user in a private project to view…](https://agentprime.io/advisories/CVE-2021-22172.md)
  `CVE-2021-22172` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 26 Mar 2021
- [GitLab: An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via…](https://agentprime.io/advisories/CVE-2021-22169.md)
  `CVE-2021-22169` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 24 Mar 2021
- [An issue has been discovered in GitLab affecting all versions starting from 13.2.](https://agentprime.io/advisories/CVE-2021-22178.md)
  `CVE-2021-22178` · CVE record: GitLab GitLab · CVSS 5.0 Medium · Not analysed yet · Published 24 Mar 2021
- [An issue has been discovered in GitLab affecting all versions starting with 7.1.](https://agentprime.io/advisories/CVE-2021-22193.md)
  `CVE-2021-22193` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 24 Mar 2021
- [A vulnerability was discovered in GitLab versions before 12.2.](https://agentprime.io/advisories/CVE-2021-22179.md)
  `CVE-2021-22179` · CVE record: GitLab GitLab · CVSS 5.4 Medium · Not analysed yet · Published 24 Mar 2021
- [An issue has been discovered in GitLab affecting all versions starting with 3.0.1.](https://agentprime.io/advisories/CVE-2021-22176.md)
  `CVE-2021-22176` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 24 Mar 2021
- [GitLab: An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to…](https://agentprime.io/advisories/CVE-2021-22186.md)
  `CVE-2021-22186` · CVE record: GitLab GitLab · CVSS 4.9 Medium · Not analysed yet · Published 24 Mar 2021
- [GitLab: Insufficient input sanitization in wikis in GitLab version 13.8 and up allows an attacker…](https://agentprime.io/advisories/CVE-2021-22185.md)
  `CVE-2021-22185` · CVE record: GitLab GitLab · CVSS 5.4 Medium · Not analysed yet · Published 24 Mar 2021
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2…](https://agentprime.io/advisories/CVE-2021-22192.md)
  `CVE-2021-22192` · CVE record: GitLab GitLab · CVSS 9.9 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 24 Mar 2021
- [An issue has been discovered in GitLab affecting all versions starting with 11.8.](https://agentprime.io/advisories/CVE-2021-22183.md)
  `CVE-2021-22183` · CVE record: GitLab GitLab · CVSS 4.1 Medium · Not analysed yet · Published 4 Mar 2021
- [GitLab: Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue…](https://agentprime.io/advisories/CVE-2021-22189.md)
  `CVE-2021-22189` · CVE record: GitLab GitLab · CVSS 5.9 Medium · Not analysed yet · Published 4 Mar 2021
- [An issue has been discovered in GitLab affecting all versions starting with 13.7.](https://agentprime.io/advisories/CVE-2021-22182.md)
  `CVE-2021-22182` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 3 Mar 2021
- [An issue has been discovered in GitLab affecting all versions starting with 13.0.](https://agentprime.io/advisories/CVE-2021-22188.md)
  `CVE-2021-22188` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 3 Mar 2021
- [An issue has been discovered in GitLab affecting all versions of Gitlab EE/CE before 13.6.7.](https://agentprime.io/advisories/CVE-2021-22187.md)
  `CVE-2021-22187` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 2 Mar 2021
- [An issue has been discovered in GitLab affecting all versions starting from 12.4.](https://agentprime.io/advisories/CVE-2020-26414.md)
  `CVE-2020-26414` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 15 Jan 2021

Newest: <https://agentprime.io/advisories/technology/gitlab.md>
Older: <https://agentprime.io/advisories/technology/gitlab.md?cursor=WyIyMDIxLTAxLTE1VDE1OjE1OjE4LjAwMDAwMFoiLCJDVkUtMjAyMC0yNjQxNCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=gitlab&cursor=WyIyMDIxLTA4LTIwVDE3OjM5OjU0LjAwMDAwMFoiLCJDVkUtMjAyMS0yMjIzOCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/gitlab/?cursor=WyIyMDIxLTA4LTIwVDE3OjM5OjU0LjAwMDAwMFoiLCJDVkUtMjAyMS0yMjIzOCJd>. Everything for agents: <https://agentprime.io/llms.txt>.