# GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6…](https://agentprime.io/advisories/CVE-2022-2497.md)
  `CVE-2022-2497` · CVE record: GitLab GitLab · CVSS 8.5 High · Not analysed yet · Published 5 Aug 2022
- [GitLab: An issue has been discovered in GitLab EE affecting all versions starting from 12.5…](https://agentprime.io/advisories/CVE-2022-2531.md)
  `CVE-2022-2531` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 5 Aug 2022
- [An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1.](https://agentprime.io/advisories/CVE-2022-1948.md)
  `CVE-2022-1948` · CVE record: GitLab GitLab · CVSS 8.7 High · Not analysed yet · Published 28 Jul 2022
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 14.0 before…](https://agentprime.io/advisories/CVE-2022-0167.md)
  `CVE-2022-0167` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 1 Jul 2022
- [GitLab: A Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all…](https://agentprime.io/advisories/CVE-2022-1954.md)
  `CVE-2022-1954` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 1 Jul 2022
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4…](https://agentprime.io/advisories/CVE-2022-1963.md)
  `CVE-2022-1963` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 1 Jul 2022
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 12.4 before…](https://agentprime.io/advisories/CVE-2022-2270.md)
  `CVE-2022-2270` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 1 Jul 2022
- [GitLab: An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to…](https://agentprime.io/advisories/CVE-2022-2229.md)
  `CVE-2022-2229` · CVE record: GitLab GitLab · CVSS 7.5 High · Not analysed yet · Published 1 Jul 2022
- [GitLab: Information exposure in GitLab EE affecting all versions from 12.0 prior to 14.10.5…](https://agentprime.io/advisories/CVE-2022-2228.md)
  `CVE-2022-2228` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 1 Jul 2022
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 prior to…](https://agentprime.io/advisories/CVE-2022-1999.md)
  `CVE-2022-1999` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 1 Jul 2022
- [GitLab: An issue has been discovered in GitLab EE affecting all versions starting from 12.2 prior…](https://agentprime.io/advisories/CVE-2022-1981.md)
  `CVE-2022-1981` · CVE record: GitLab GitLab · CVSS 2.7 Low · Not analysed yet · Published 1 Jul 2022
- [GitLab: Incorrect authorization in GitLab EE affecting all versions from 10.7 prior to 14.10.5…](https://agentprime.io/advisories/CVE-2022-1983.md)
  `CVE-2022-1983` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2022
- [GitLab: A Stored Cross-Site Scripting vulnerability in the project settings page in GitLab CE/EE…](https://agentprime.io/advisories/CVE-2022-2230.md)
  `CVE-2022-2230` · CVE record: GitLab GitLab · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.58 · Not analysed yet · Published 1 Jul 2022
- [GitLab: Improper access control in the runner jobs API in GitLab CE/EE affecting all versions…](https://agentprime.io/advisories/CVE-2022-2227.md)
  `CVE-2022-2227` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 1 Jul 2022
- [GitLab: An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to…](https://agentprime.io/advisories/CVE-2022-2243.md)
  `CVE-2022-2243` · CVE record: GitLab GitLab · CVSS 5.0 Medium · Not analysed yet · Published 1 Jul 2022
- [GitLab: Insufficient sanitization in GitLab EE's external issue tracker affecting all versions…](https://agentprime.io/advisories/CVE-2022-2235.md)
  `CVE-2022-2235` · CVE record: GitLab GitLab · CVSS 8.7 High · Not analysed yet · Published 1 Jul 2022
- [GitLab: A critical issue has been discovered in GitLab affecting all versions starting from 14.0…](https://agentprime.io/advisories/CVE-2022-2185.md)
  `CVE-2022-2185` · CVE record: GitLab GitLab · CVSS 9.9 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.77 · Not analysed yet · Published 1 Jul 2022
- [GitLab: An information disclosure vulnerability in GitLab EE affecting all versions from 12.5…](https://agentprime.io/advisories/CVE-2022-2281.md)
  `CVE-2022-2281` · CVE record: GitLab GitLab · CVSS 2.6 Low · Not analysed yet · Published 1 Jul 2022
- [GitLab: An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8…](https://agentprime.io/advisories/CVE-2022-2244.md)
  `CVE-2022-2244` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 1 Jul 2022
- [GitLab: An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to…](https://agentprime.io/advisories/CVE-2022-2250.md)
  `CVE-2022-2250` · CVE record: GitLab GitLab · CVSS 4.7 Medium · Not analysed yet · Published 1 Jul 2022
- [GitLab: An account takeover issue has been discovered in GitLab EE affecting all versions…](https://agentprime.io/advisories/CVE-2022-1680.md)
  `CVE-2022-1680` · CVE record: GitLab GitLab · CVSS 9.9 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 6 Jun 2022
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3…](https://agentprime.io/advisories/CVE-2022-1783.md)
  `CVE-2022-1783` · CVE record: GitLab GitLab · CVSS 2.7 Low · Not analysed yet · Published 6 Jun 2022
- [GitLab: When the feature is configured, improper authorization in the Interactive Web Terminal in…](https://agentprime.io/advisories/CVE-2022-1944.md)
  `CVE-2022-1944` · CVE record: GitLab GitLab · CVSS 5.4 Medium · Not analysed yet · Published 6 Jun 2022
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8…](https://agentprime.io/advisories/CVE-2022-1821.md)
  `CVE-2022-1821` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 6 Jun 2022
- [GitLab: Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5…](https://agentprime.io/advisories/CVE-2022-1936.md)
  `CVE-2022-1936` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 6 Jun 2022
- [GitLab: A Stored Cross-Site Scripting vulnerability in Jira integration in GitLab EE affecting…](https://agentprime.io/advisories/CVE-2022-1940.md)
  `CVE-2022-1940` · CVE record: GitLab GitLab · CVSS 7.7 High · Not analysed yet · Published 6 Jun 2022
- [GitLab: Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5…](https://agentprime.io/advisories/CVE-2022-1935.md)
  `CVE-2022-1935` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 6 Jun 2022
- [GitLab: Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all…](https://agentprime.io/advisories/CVE-2022-1423.md)
  `CVE-2022-1423` · CVE record: GitLab GitLab · CVSS 7.1 High · Not analysed yet · Published 19 May 2022
- [GitLab: Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before…](https://agentprime.io/advisories/CVE-2022-1413.md)
  `CVE-2022-1413` · CVE record: GitLab GitLab · CVSS 5.4 Medium · Not analysed yet · Published 19 May 2022
- [GitLab: Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all…](https://agentprime.io/advisories/CVE-2022-1416.md)
  `CVE-2022-1416` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 19 May 2022
- [GitLab: An improper authorization issue has been discovered in GitLab CE/EE affecting all…](https://agentprime.io/advisories/CVE-2022-1124.md)
  `CVE-2022-1124` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 11 May 2022
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 13.9 before…](https://agentprime.io/advisories/CVE-2022-1510.md)
  `CVE-2022-1510` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 11 May 2022
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 9.2 before…](https://agentprime.io/advisories/CVE-2022-1460.md)
  `CVE-2022-1460` · CVE record: GitLab GitLab · CVSS 6.1 Medium · Not analysed yet · Published 11 May 2022
- [GitLab: Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to…](https://agentprime.io/advisories/CVE-2022-1406.md)
  `CVE-2022-1406` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 11 May 2022
- [GitLab: An issue has been discovered in GitLab affecting all versions before 14.8.6…](https://agentprime.io/advisories/CVE-2022-1428.md)
  `CVE-2022-1428` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 11 May 2022
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 12.6 before…](https://agentprime.io/advisories/CVE-2022-1426.md)
  `CVE-2022-1426` · CVE record: GitLab GitLab · CVSS 2.0 Low · Not analysed yet · Published 11 May 2022
- [GitLab: Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all…](https://agentprime.io/advisories/CVE-2022-1352.md)
  `CVE-2022-1352` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2022
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 14.4 before…](https://agentprime.io/advisories/CVE-2022-1433.md)
  `CVE-2022-1433` · CVE record: GitLab GitLab · CVSS 2.6 Low · Not analysed yet · Published 11 May 2022
- [GitLab: It was possible to disclose details of confidential notes created via the API in Gitlab…](https://agentprime.io/advisories/CVE-2022-1545.md)
  `CVE-2022-1545` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 11 May 2022
- [GitLab: Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before…](https://agentprime.io/advisories/CVE-2022-1417.md)
  `CVE-2022-1417` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 10 May 2022
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 12.10 before…](https://agentprime.io/advisories/CVE-2022-1431.md)
  `CVE-2022-1431` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 10 May 2022
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 11.9 before…](https://agentprime.io/advisories/CVE-2022-0477.md)
  `CVE-2022-0477` · CVE record: GitLab GitLab · CVSS 4.9 Medium · Not analysed yet · Published 25 Apr 2022
- [GitLab: Missing sanitization of logged exception messages in all versions prior to 14.7.7…](https://agentprime.io/advisories/CVE-2022-1157.md)
  `CVE-2022-1157` · CVE record: GitLab GitLab · CVSS 2.6 Low · Not analysed yet · Published 11 Apr 2022
- [GitLab: Improper access control in GitLab CE/EE versions 10.7 prior to 14.7.7…](https://agentprime.io/advisories/CVE-2022-1193.md)
  `CVE-2022-1193` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 11 Apr 2022
- [GitLab: Improper handling of user input in GitLab CE/EE versions 8.3 prior to 14.7.7…](https://agentprime.io/advisories/CVE-2022-1190.md)
  `CVE-2022-1190` · CVE record: GitLab GitLab · CVSS 8.7 High · Critical (CVSS 7+ and EPSS) · EPSS 0.88 · Not analysed yet · Published 4 Apr 2022
- [GitLab: Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7…](https://agentprime.io/advisories/CVE-2022-1175.md)
  `CVE-2022-1175` · CVE record: GitLab GitLab · CVSS 8.7 High · Critical (CVSS 7+ and EPSS) · EPSS 0.82 · Not analysed yet · Published 4 Apr 2022
- [A hardcoded password was set for accounts registered using an OmniAuth provider (e.g.](https://agentprime.io/advisories/CVE-2022-1162.md)
  `CVE-2022-1162` · CVE record: GitLab GitLab · CVSS 9.1 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.76 · Not analysed yet · Published 4 Apr 2022
- [GitLab: Improper authorization in GitLab Pages included with GitLab CE/EE affecting all versions…](https://agentprime.io/advisories/CVE-2022-1148.md)
  `CVE-2022-1148` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 4 Apr 2022
- [GitLab: A business logic error in Project Import in GitLab CE/EE versions 14.9 prior to 14.9.2…](https://agentprime.io/advisories/CVE-2022-1111.md)
  `CVE-2022-1111` · CVE record: GitLab GitLab · CVSS 2.4 Low · Not analysed yet · Published 4 Apr 2022
- [GitLab: A denial of service vulnerability when rendering RDoc files in GitLab CE/EE versions 10…](https://agentprime.io/advisories/CVE-2022-1185.md)
  `CVE-2022-1185` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 4 Apr 2022
- [GitLab: Missing filtering in an error message in GitLab CE/EE affecting all versions prior to…](https://agentprime.io/advisories/CVE-2022-1120.md)
  `CVE-2022-1120` · CVE record: GitLab GitLab · CVSS 4.8 Medium · Not analysed yet · Published 4 Apr 2022
- [GitLab: A potential DoS vulnerability was discovered in Gitlab CE/EE versions 13.7 before 14.7.7…](https://agentprime.io/advisories/CVE-2022-1174.md)
  `CVE-2022-1174` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 4 Apr 2022
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1…](https://agentprime.io/advisories/CVE-2022-1188.md)
  `CVE-2022-1188` · CVE record: GitLab GitLab · CVSS 3.7 Low · Not analysed yet · Published 4 Apr 2022
- [GitLab: An improper access control vulnerability in GitLab CE/EE affecting all versions from…](https://agentprime.io/advisories/CVE-2022-1105.md)
  `CVE-2022-1105` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 4 Apr 2022
- [GitLab: Adding a very large number of tags to a runner in GitLab CE/EE affecting all versions…](https://agentprime.io/advisories/CVE-2022-1099.md)
  `CVE-2022-1099` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 4 Apr 2022
- [GitLab: A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from…](https://agentprime.io/advisories/CVE-2022-1100.md)
  `CVE-2022-1100` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 4 Apr 2022
- [GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.2…](https://agentprime.io/advisories/CVE-2022-1189.md)
  `CVE-2022-1189` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 4 Apr 2022
- [GitLab: Incorrect authorization in the Asana integration's branch restriction feature in all…](https://agentprime.io/advisories/CVE-2022-0740.md)
  `CVE-2022-0740` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 4 Apr 2022
- [GitLab: Improper input validation in all versions of GitLab CE/EE using sendmail to send emails…](https://agentprime.io/advisories/CVE-2022-0741.md)
  `CVE-2022-0741` · CVE record: GitLab GitLab · CVSS 5.8 Medium · Not analysed yet · Published 1 Apr 2022
- [GitLab: A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of…](https://agentprime.io/advisories/CVE-2022-0425.md)
  `CVE-2022-0425` · CVE record: GitLab GitLab · CVSS 5.4 Medium · Not analysed yet · Published 1 Apr 2022

Newest: <https://agentprime.io/advisories/technology/gitlab.md>
Older: <https://agentprime.io/advisories/technology/gitlab.md?cursor=WyIyMDIyLTA0LTAxVDIyOjE3OjM5LjAwMDAwMFoiLCJDVkUtMjAyMi0wNDI1Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=gitlab&cursor=WyIyMDIyLTA4LTA1VDE1OjA5OjMzLjAwMDAwMFoiLCJDVkUtMjAyMi0yNDk5Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/gitlab/?cursor=WyIyMDIyLTA4LTA1VDE1OjA5OjMzLjAwMDAwMFoiLCJDVkUtMjAyMi0yNDk5Il0>. Everything for agents: <https://agentprime.io/llms.txt>.