# GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [GitLab: An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP…](https://agentprime.io/advisories/CVE-2021-22166.md)
  `CVE-2021-22166` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 15 Jan 2021
- [An issue has been discovered in GitLab affecting all versions starting from 12.1.](https://agentprime.io/advisories/CVE-2021-22167.md)
  `CVE-2021-22167` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 15 Jan 2021
- [GitLab: Insufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+…](https://agentprime.io/advisories/CVE-2021-22171.md)
  `CVE-2021-22171` · CVE record: GitLab GitLab · CVSS 7.3 High · Not analysed yet · Published 15 Jan 2021
- [GitLab: A regular expression denial of service issue has been discovered in NuGet API affecting…](https://agentprime.io/advisories/CVE-2021-22168.md)
  `CVE-2021-22168` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 15 Jan 2021
- [GitLab: A potential DOS vulnerability was discovered in all versions of Gitlab starting from…](https://agentprime.io/advisories/CVE-2020-26411.md)
  `CVE-2020-26411` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 11 Dec 2020
- [GitLab: Information about the starred projects for private user profiles was exposed via the…](https://agentprime.io/advisories/CVE-2020-26415.md)
  `CVE-2020-26415` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 11 Dec 2020
- [An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2.](https://agentprime.io/advisories/CVE-2020-13341.md)
  `CVE-2020-13341` · CVE record: GitLab GitLab · CVSS 4.9 Medium · Not analysed yet · Published 12 Oct 2020
- [GitLab: An issue has been discovered in GitLab affecting all versions before 13.2.10…](https://agentprime.io/advisories/CVE-2020-13339.md)
  `CVE-2020-13339` · CVE record: GitLab GitLab · CVSS 5.5 Medium · Not analysed yet · Published 8 Oct 2020
- [GitLab: An issue has been discovered in GitLab affecting all versions prior to 13.2.10…](https://agentprime.io/advisories/CVE-2020-13340.md)
  `CVE-2020-13340` · CVE record: GitLab GitLab · CVSS 8.7 High · Critical (CVSS 7+ and EPSS) · EPSS 0.67 · Not analysed yet · Published 8 Oct 2020
- [An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2.](https://agentprime.io/advisories/CVE-2020-13344.md)
  `CVE-2020-13344` · CVE record: GitLab GitLab · CVSS 5.7 Medium · Not analysed yet · Published 8 Oct 2020
- [GitLab: An issue has been discovered in GitLab affecting versions prior to 13.2.10…](https://agentprime.io/advisories/CVE-2020-13342.md)
  `CVE-2020-13342` · CVE record: GitLab GitLab · CVSS 2.7 Low · Not analysed yet · Published 7 Oct 2020
- [GitLab: Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to…](https://agentprime.io/advisories/CVE-2020-13346.md)
  `CVE-2020-13346` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2020
- [GitLab: In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2…](https://agentprime.io/advisories/CVE-2020-13334.md)
  `CVE-2020-13334` · CVE record: GitLab GitLab · CVSS 5.9 Medium · Not analysed yet · Published 7 Oct 2020
- [GitLab: Improper group membership validation when deleting a user account in GitLab >=7.12 allows…](https://agentprime.io/advisories/CVE-2020-13335.md)
  `CVE-2020-13335` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2020
- [A potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3.](https://agentprime.io/advisories/CVE-2020-13333.md)
  `CVE-2020-13333` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2020
- [An issue has been discovered in GitLab affecting all versions starting from 10.8.](https://agentprime.io/advisories/CVE-2020-13345.md)
  `CVE-2020-13345` · CVE record: GitLab GitLab · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2020
- [An issue has been discovered in GitLab affecting all versions starting from 11.2.](https://agentprime.io/advisories/CVE-2020-13343.md)
  `CVE-2020-13343` · CVE record: GitLab GitLab · CVSS 7.5 High · Not analysed yet · Published 6 Oct 2020
- [An issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2.](https://agentprime.io/advisories/CVE-2020-13338.md)
  `CVE-2020-13338` · CVE record: GitLab GitLab · CVSS 5.4 Medium · Not analysed yet · Published 2 Oct 2020
- [GitLab: An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that…](https://agentprime.io/advisories/CVE-2020-13337.md)
  `CVE-2020-13337` · CVE record: GitLab GitLab · CVSS 7.2 High · Not analysed yet · Published 2 Oct 2020
- [An issue has been discovered in GitLab affecting versions from 11.8 before 12.10.13.](https://agentprime.io/advisories/CVE-2020-13336.md)
  `CVE-2020-13336` · CVE record: GitLab GitLab · CVSS 4.0 Medium · Not analysed yet · Published 30 Sept 2020
- [A vulnerability was discovered in GitLab versions prior to 13.1.](https://agentprime.io/advisories/CVE-2020-13326.md)
  `CVE-2020-13326` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 29 Sept 2020
- [A vulnerability was discovered in GitLab versions prior to 13.1.](https://agentprime.io/advisories/CVE-2020-13321.md)
  `CVE-2020-13321` · CVE record: GitLab GitLab · CVSS 8.3 High · Not analysed yet · Published 29 Sept 2020
- [A vulnerability was discovered in GitLab versions prior to 13.1.](https://agentprime.io/advisories/CVE-2020-13324.md)
  `CVE-2020-13324` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 29 Sept 2020
- [A vulnerability was discovered in GitLab versions prior 13.1.](https://agentprime.io/advisories/CVE-2020-13325.md)
  `CVE-2020-13325` · CVE record: GitLab GitLab · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2020
- [A vulnerability was discovered in GitLab versions prior 13.1.](https://agentprime.io/advisories/CVE-2020-13323.md)
  `CVE-2020-13323` · CVE record: GitLab GitLab · CVSS 7.7 High · Not analysed yet · Published 29 Sept 2020
- [An issue has been discovered in GitLab affecting versions prior to 12.10.13.](https://agentprime.io/advisories/CVE-2020-13331.md)
  `CVE-2020-13331` · CVE record: GitLab GitLab · CVSS 5.4 Medium · Not analysed yet · Published 29 Sept 2020
- [An issue has been discovered in GitLab affecting versions prior to 12.10.13.](https://agentprime.io/advisories/CVE-2020-13330.md)
  `CVE-2020-13330` · CVE record: GitLab GitLab · CVSS 4.4 Medium · Not analysed yet · Published 29 Sept 2020
- [An issue has been discovered in GitLab affecting versions from 12.6.2 prior to 12.10.13.](https://agentprime.io/advisories/CVE-2020-13329.md)
  `CVE-2020-13329` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 29 Sept 2020
- [An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13.](https://agentprime.io/advisories/CVE-2020-13328.md)
  `CVE-2020-13328` · CVE record: GitLab GitLab · CVSS 4.8 Medium · Not analysed yet · Published 29 Sept 2020
- [GitLab: An issue has been discovered in GitLab before version 12.10.13 that allowed a project…](https://agentprime.io/advisories/CVE-2020-13320.md)
  `CVE-2020-13320` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 29 Sept 2020
- [A vulnerability was discovered in GitLab versions after 12.9.](https://agentprime.io/advisories/CVE-2020-13322.md)
  `CVE-2020-13322` · CVE record: GitLab GitLab · CVSS 7.2 High · Not analysed yet · Published 29 Sept 2020
- [An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13.](https://agentprime.io/advisories/CVE-2020-13319.md)
  `CVE-2020-13319` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 29 Sept 2020
- [GitLab: An issue has been discovered in GitLab affecting versions >=10.7 <13.0.14…](https://agentprime.io/advisories/CVE-2020-13296.md)
  `CVE-2020-13296` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 29 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13307.md)
  `CVE-2020-13307` · CVE record: GitLab GitLab · CVSS 3.8 Low · Not analysed yet · Published 15 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13308.md)
  `CVE-2020-13308` · CVE record: GitLab GitLab · CVSS 2.7 Low · Not analysed yet · Published 15 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13303.md)
  `CVE-2020-13303` · CVE record: GitLab GitLab · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13298.md)
  `CVE-2020-13298` · CVE record: GitLab GitLab · CVSS 7.2 High · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13305.md)
  `CVE-2020-13305` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13309.md)
  `CVE-2020-13309` · CVE record: GitLab GitLab · CVSS 5.4 Medium · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1.](https://agentprime.io/advisories/CVE-2020-13310.md)
  `CVE-2020-13310` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13315.md)
  `CVE-2020-13315` · CVE record: GitLab GitLab · CVSS 3.7 Low · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13306.md)
  `CVE-2020-13306` · CVE record: GitLab GitLab · CVSS 3.7 Low · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13301.md)
  `CVE-2020-13301` · CVE record: GitLab GitLab · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13302.md)
  `CVE-2020-13302` · CVE record: GitLab GitLab · CVSS 3.8 Low · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13297.md)
  `CVE-2020-13297` · CVE record: GitLab GitLab · CVSS 3.8 Low · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13304.md)
  `CVE-2020-13304` · CVE record: GitLab GitLab · CVSS 3.8 Low · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13314.md)
  `CVE-2020-13314` · CVE record: GitLab GitLab · CVSS 3.7 Low · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13311.md)
  `CVE-2020-13311` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13312.md)
  `CVE-2020-13312` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13313.md)
  `CVE-2020-13313` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8, and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13317.md)
  `CVE-2020-13317` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13318.md)
  `CVE-2020-13318` · CVE record: GitLab GitLab · CVSS 6.4 Medium · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13284.md)
  `CVE-2020-13284` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13289.md)
  `CVE-2020-13289` · CVE record: GitLab GitLab · CVSS 5.4 Medium · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13287.md)
  `CVE-2020-13287` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13316.md)
  `CVE-2020-13316` · CVE record: GitLab GitLab · CVSS 5.4 Medium · Not analysed yet · Published 14 Sept 2020
- [A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.](https://agentprime.io/advisories/CVE-2020-13299.md)
  `CVE-2020-13299` · CVE record: GitLab GitLab · CVSS 8.1 High · Not analysed yet · Published 14 Sept 2020
- [GitLab: GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope…](https://agentprime.io/advisories/CVE-2020-13300.md)
  `CVE-2020-13300` · CVE record: GitLab GitLab · CVSS 8.0 High · Not analysed yet · Published 14 Sept 2020
- [GitLab: For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can…](https://agentprime.io/advisories/CVE-2020-13286.md)
  `CVE-2020-13286` · CVE record: GitLab GitLab · CVSS 6.4 Medium · Not analysed yet · Published 13 Aug 2020
- [For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature](https://agentprime.io/advisories/CVE-2020-13281.md)
  `CVE-2020-13281` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2020

Newest: <https://agentprime.io/advisories/technology/gitlab.md>
Older: <https://agentprime.io/advisories/technology/gitlab.md?cursor=WyIyMDIwLTA4LTEzVDEzOjIyOjIzLjAwMDAwMFoiLCJDVkUtMjAyMC0xMzI4MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=gitlab&cursor=WyIyMDIxLTAxLTE1VDE1OjE1OjE4LjAwMDAwMFoiLCJDVkUtMjAyMC0yNjQxNCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/gitlab/?cursor=WyIyMDIxLTAxLTE1VDE1OjE1OjE4LjAwMDAwMFoiLCJDVkUtMjAyMC0yNjQxNCJd>. Everything for agents: <https://agentprime.io/llms.txt>.