# GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [GitLab: In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6…](https://agentprime.io/advisories/CVE-2021-39908.md)
  `CVE-2021-39908` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 1 Apr 2022
- [GitLab: Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4…](https://agentprime.io/advisories/CVE-2022-0373.md)
  `CVE-2022-0373` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 1 Apr 2022
- [GitLab: Improper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4…](https://agentprime.io/advisories/CVE-2022-0390.md)
  `CVE-2022-0390` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 1 Apr 2022
- [An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 .](https://agentprime.io/advisories/CVE-2022-0489.md)
  `CVE-2022-0489` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 1 Apr 2022
- [GitLab: An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5…](https://agentprime.io/advisories/CVE-2021-4191.md)
  `CVE-2021-4191` · CVE record: GitLab GitLab · CVSS 5.3 Medium · EPSS 0.80 · Not analysed yet · Published 28 Mar 2022
- [An issue has been discovered affecting GitLab versions prior to 13.5.](https://agentprime.io/advisories/CVE-2022-0283.md)
  `CVE-2022-0283` · CVE record: GitLab GitLab · CVSS 4.7 Medium · Not analysed yet · Published 28 Mar 2022
- [GitLab: A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4…](https://agentprime.io/advisories/CVE-2022-0136.md)
  `CVE-2022-0136` · CVE record: GitLab GitLab · CVSS 5.4 Medium · Not analysed yet · Published 28 Mar 2022
- [GitLab: In all versions of GitLab CE/EE since version 11.3…](https://agentprime.io/advisories/CVE-2021-39876.md)
  `CVE-2021-39876` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 28 Mar 2022
- [An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10.](https://agentprime.io/advisories/CVE-2022-0488.md)
  `CVE-2022-0488` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 28 Mar 2022
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 10.0 before…](https://agentprime.io/advisories/CVE-2022-0344.md)
  `CVE-2022-0344` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 28 Mar 2022
- [A vulnerability was discovered in GitLab starting with version 12.](https://agentprime.io/advisories/CVE-2022-0249.md)
  `CVE-2022-0249` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 28 Mar 2022
- [GitLab: An issue has been discovered affecting GitLab versions prior to 14.4.5…](https://agentprime.io/advisories/CVE-2022-0123.md)
  `CVE-2022-0123` · CVE record: GitLab GitLab · CVSS 5.9 Medium · Not analysed yet · Published 28 Mar 2022
- [GitLab: Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab…](https://agentprime.io/advisories/CVE-2022-0427.md)
  `CVE-2022-0427` · CVE record: GitLab GitLab · CVSS 7.7 High · Not analysed yet · Published 28 Mar 2022
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 14.6 before…](https://agentprime.io/advisories/CVE-2022-0738.md)
  `CVE-2022-0738` · CVE record: GitLab GitLab · CVSS 4.2 Medium · Not analysed yet · Published 28 Mar 2022
- [GitLab: Inaccurate display of Snippet files containing special characters in all versions of…](https://agentprime.io/advisories/CVE-2022-0751.md)
  `CVE-2022-0751` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 28 Mar 2022
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4…](https://agentprime.io/advisories/CVE-2022-0371.md)
  `CVE-2022-0371` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 28 Mar 2022
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6…](https://agentprime.io/advisories/CVE-2022-0549.md)
  `CVE-2022-0549` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 28 Mar 2022
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10…](https://agentprime.io/advisories/CVE-2022-0735.md)
  `CVE-2022-0735` · CVE record: GitLab GitLab · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 28 Mar 2022
- [GitLab: An authorization logic error in the External Status Check API in GitLab EE affecting all…](https://agentprime.io/advisories/CVE-2021-39943.md)
  `CVE-2021-39943` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 9 Feb 2022
- [GitLab: In all versions of GitLab CE/EE since version 12.0…](https://agentprime.io/advisories/CVE-2021-39892.md)
  `CVE-2021-39892` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 18 Jan 2022
- [GitLab: A denial of service vulnerability in GitLab CE/EE affecting all versions starting from…](https://agentprime.io/advisories/CVE-2021-39942.md)
  `CVE-2021-39942` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 18 Jan 2022
- [GitLab: Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6…](https://agentprime.io/advisories/CVE-2021-39946.md)
  `CVE-2021-39946` · CVE record: GitLab GitLab · CVSS 8.7 High · Not analysed yet · Published 18 Jan 2022
- [GitLab: An issue has been discovered affecting GitLab versions prior to 14.4.5…](https://agentprime.io/advisories/CVE-2022-0090.md)
  `CVE-2022-0090` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 18 Jan 2022
- [GitLab: An issue has been discovered affecting GitLab versions prior to 14.4.5…](https://agentprime.io/advisories/CVE-2022-0093.md)
  `CVE-2022-0093` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 18 Jan 2022
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 12.0 before…](https://agentprime.io/advisories/CVE-2022-0125.md)
  `CVE-2022-0125` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 18 Jan 2022
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 7.7 before…](https://agentprime.io/advisories/CVE-2022-0154.md)
  `CVE-2022-0154` · CVE record: GitLab GitLab · CVSS 7.5 High · Not analysed yet · Published 18 Jan 2022
- [GitLab: An issue has been discovered affecting GitLab versions prior to 14.4.5…](https://agentprime.io/advisories/CVE-2022-0124.md)
  `CVE-2022-0124` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 18 Jan 2022
- [An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5.](https://agentprime.io/advisories/CVE-2022-0244.md)
  `CVE-2022-0244` · CVE record: GitLab GitLab · CVSS 8.6 High · Not analysed yet · Published 18 Jan 2022
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 12.10 before…](https://agentprime.io/advisories/CVE-2022-0151.md)
  `CVE-2022-0151` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 18 Jan 2022
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 13.10 before…](https://agentprime.io/advisories/CVE-2022-0152.md)
  `CVE-2022-0152` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 18 Jan 2022
- [GitLab: Server side request forgery protections in GitLab CE/EE versions between 8.4 and 14.4.4…](https://agentprime.io/advisories/CVE-2021-39927.md)
  `CVE-2021-39927` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 18 Jan 2022
- [An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3.](https://agentprime.io/advisories/CVE-2022-0172.md)
  `CVE-2022-0172` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 18 Jan 2022
- [GitLab: Missing authorization in GitLab EE versions between 12.4 and 14.3.6…](https://agentprime.io/advisories/CVE-2021-39930.md)
  `CVE-2021-39930` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 13 Dec 2021
- [GitLab: An information disclosure vulnerability in GitLab CE/EE versions 12.0 to 14.3.6…](https://agentprime.io/advisories/CVE-2021-39941.md)
  `CVE-2021-39941` · CVE record: GitLab GitLab · CVSS 3.7 Low · Not analysed yet · Published 13 Dec 2021
- [Server-side request forgery in GitLab](https://agentprime.io/advisories/CVE-2021-39935.md)
  `CVE-2021-39935` · CVE record: GitLab GitLab · CVSS 6.8 Medium · Critical (KEV) · In CISA KEV · EPSS 0.36 · Not analysed yet · Published 13 Dec 2021 · Tags: Server-side request forgery (SSRF)
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0…](https://agentprime.io/advisories/CVE-2021-39932.md)
  `CVE-2021-39932` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 13 Dec 2021
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9…](https://agentprime.io/advisories/CVE-2021-39917.md)
  `CVE-2021-39917` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 13 Dec 2021
- [GitLab: Improper access control allows any project member to retrieve the service desk email…](https://agentprime.io/advisories/CVE-2021-39934.md)
  `CVE-2021-39934` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 13 Dec 2021
- [GitLab: Lack of an access control check in the External Status Check feature allowed any…](https://agentprime.io/advisories/CVE-2021-39916.md)
  `CVE-2021-39916` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 13 Dec 2021
- [GitLab: In all versions of GitLab CE/EE starting version 14.0 before 14.3.6…](https://agentprime.io/advisories/CVE-2021-39919.md)
  `CVE-2021-39919` · CVE record: GitLab GitLab · CVSS 4.4 Medium · Not analysed yet · Published 13 Dec 2021
- [GitLab: Improper access control in the GraphQL API in GitLab CE/EE affecting all versions…](https://agentprime.io/advisories/CVE-2021-39915.md)
  `CVE-2021-39915` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 13 Dec 2021
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10…](https://agentprime.io/advisories/CVE-2021-39933.md)
  `CVE-2021-39933` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 13 Dec 2021
- [GitLab: A vulnerable regular expression pattern in GitLab CE/EE since version 8.15 before 14.3.6…](https://agentprime.io/advisories/CVE-2021-39938.md)
  `CVE-2021-39938` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 13 Dec 2021
- [GitLab: A collision in access memoization logic in all versions of GitLab CE/EE before 14.3.6…](https://agentprime.io/advisories/CVE-2021-39937.md)
  `CVE-2021-39937` · CVE record: GitLab GitLab · CVSS 5.9 Medium · Not analysed yet · Published 13 Dec 2021
- [GitLab: Improper access control in GitLab CE/EE affecting all versions starting from 10.7 before…](https://agentprime.io/advisories/CVE-2021-39936.md)
  `CVE-2021-39936` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 13 Dec 2021
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11…](https://agentprime.io/advisories/CVE-2021-39931.md)
  `CVE-2021-39931` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 13 Dec 2021
- [GitLab: Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4…](https://agentprime.io/advisories/CVE-2021-39945.md)
  `CVE-2021-39945` · CVE record: GitLab GitLab · CVSS 2.7 Low · Not analysed yet · Published 13 Dec 2021
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0…](https://agentprime.io/advisories/CVE-2021-39944.md)
  `CVE-2021-39944` · CVE record: GitLab GitLab · CVSS 7.1 High · Not analysed yet · Published 13 Dec 2021
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2…](https://agentprime.io/advisories/CVE-2021-39940.md)
  `CVE-2021-39940` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 13 Dec 2021
- [GitLab: Incorrect Authorization in GitLab EE affecting all versions starting from 11.1 before…](https://agentprime.io/advisories/CVE-2021-39918.md)
  `CVE-2021-39918` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 13 Dec 2021
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6…](https://agentprime.io/advisories/CVE-2021-39910.md)
  `CVE-2021-39910` · CVE record: GitLab GitLab · CVSS 2.6 Low · Not analysed yet · Published 13 Dec 2021
- [GitLab: Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to…](https://agentprime.io/advisories/CVE-2021-22170.md)
  `CVE-2021-22170` · CVE record: GitLab GitLab · CVSS 6.2 Medium · Not analysed yet · Published 6 Dec 2021
- [GitLab: It was possible to bypass 2FA for LDAP users and access some specific pages with Basic…](https://agentprime.io/advisories/CVE-2021-39890.md)
  `CVE-2021-39890` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 6 Dec 2021
- [GitLab: In all versions of GitLab CE/EE since version 10.6…](https://agentprime.io/advisories/CVE-2021-39898.md)
  `CVE-2021-39898` · CVE record: GitLab GitLab · CVSS 3.7 Low · Not analysed yet · Published 4 Nov 2021
- [GitLab: An information disclosure vulnerability in the GitLab CE/EE API since version 8.9.6…](https://agentprime.io/advisories/CVE-2021-39905.md)
  `CVE-2021-39905` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 4 Nov 2021
- [GitLab: An improper access control flaw in all versions of GitLab CE/EE starting from 13.9 before…](https://agentprime.io/advisories/CVE-2021-39911.md)
  `CVE-2021-39911` · CVE record: GitLab GitLab · CVSS 1.7 Low · Not analysed yet · Published 4 Nov 2021
- [A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7.](https://agentprime.io/advisories/CVE-2021-39907.md)
  `CVE-2021-39907` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 4 Nov 2021
- [GitLab: An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab…](https://agentprime.io/advisories/CVE-2021-39904.md)
  `CVE-2021-39904` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 4 Nov 2021
- [GitLab: In all versions of GitLab CE/EE since version 8.0…](https://agentprime.io/advisories/CVE-2021-39895.md)
  `CVE-2021-39895` · CVE record: GitLab GitLab · CVSS 6.0 Medium · Not analysed yet · Published 4 Nov 2021
- [GitLab: A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of…](https://agentprime.io/advisories/CVE-2021-22260.md)
  `CVE-2021-22260` · CVE record: GitLab GitLab · CVSS 7.7 High · Not analysed yet · Published 4 Nov 2021

Newest: <https://agentprime.io/advisories/technology/gitlab.md>
Older: <https://agentprime.io/advisories/technology/gitlab.md?cursor=WyIyMDIxLTExLTA0VDIzOjEwOjM4LjAwMDAwMFoiLCJDVkUtMjAyMS0yMjI2MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=gitlab&cursor=WyIyMDIyLTA0LTAxVDIyOjE3OjM5LjAwMDAwMFoiLCJDVkUtMjAyMi0wNDI1Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/gitlab/?cursor=WyIyMDIyLTA0LTAxVDIyOjE3OjM5LjAwMDAwMFoiLCJDVkUtMjAyMi0wNDI1Il0>. Everything for agents: <https://agentprime.io/llms.txt>.