Advisories · Technology

GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-10094 CVE record

CVSS 6.5 Medium

Improper Validation of Specified Quantity in Input in GitLab
- GitLab
- CWE-1284
Not analysed yet 12 Sept 2025
CVE-2025-2246 CVE record

CVSS 5.8 Medium

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 27 Aug 2025
CVE-2025-3601 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 27 Aug 2025
CVE-2025-4225 CVE record

CVSS 5.3 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 27 Aug 2025
CVE-2025-5101 CVE record

CVSS 5.0 Medium

Improper Control of Generation of Code ('Code Injection') in GitLab
- GitLab
- Code injection
Not analysed yet 27 Aug 2025
CVE-2024-10219 CVE record

CVSS 6.5 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 13 Aug 2025
CVE-2024-12303 CVE record

CVSS 6.7 Medium

Incorrect Privilege Assignment in GitLab
- GitLab
- Privilege escalation
Not analysed yet 13 Aug 2025
CVE-2025-1477 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 13 Aug 2025
CVE-2025-2498 CVE record

CVSS 3.1 Low

Insufficient Granularity of Access Control in GitLab
- GitLab
- CWE-1220
Not analysed yet 13 Aug 2025
CVE-2025-2614 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 13 Aug 2025
CVE-2025-2937 CVE record

CVSS 6.5 Medium

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 13 Aug 2025
CVE-2025-5819 CVE record

CVSS 5.0 Medium

Incorrect Permission Assignment for Critical Resource in GitLab
- GitLab
- Broken access control
Not analysed yet 13 Aug 2025
CVE-2025-6186 CVE record

CVSS 8.7 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 13 Aug 2025
CVE-2025-7739 CVE record

CVSS 8.7 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 13 Aug 2025
CVE-2025-7734 CVE record

CVSS 8.7 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 13 Aug 2025
CVE-2025-8770 CVE record

CVSS 6.5 Medium

Authorization Bypass Through User-Controlled Key in GitLab
- GitLab
- Broken access control
Not analysed yet 13 Aug 2025
CVE-2025-0765 CVE record

CVSS 4.3 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 24 Jul 2025
CVE-2025-1299 CVE record

CVSS 4.3 Medium

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 24 Jul 2025
CVE-2025-4976 CVE record

CVSS 4.3 Medium

Exposure of Sensitive Information Due to Incompatible Policies in GitLab
- GitLab
- CWE-213
Not analysed yet 24 Jul 2025
CVE-2025-7001 CVE record

CVSS 4.3 Medium

Insufficient Granularity of Access Control in GitLab
- GitLab
- CWE-1220
Not analysed yet 24 Jul 2025
CVE-2025-4439 CVE record

CVSS 7.7 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 23 Jul 2025
CVE-2025-4700 CVE record

CVSS 8.7 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 23 Jul 2025
CVE-2025-3396 CVE record

CVSS 4.3 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 10 Jul 2025
CVE-2025-4972 CVE record

CVSS 2.7 Low

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 10 Jul 2025
CVE-2025-6168 CVE record

CVSS 2.7 Low

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 10 Jul 2025
CVE-2025-6948 CVE record

CVSS 8.7 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 10 Jul 2025
CVE-2025-1754 CVE record

CVSS 5.3 Medium

Missing Authentication for Critical Function in GitLab
- GitLab
- Authentication bypass
Not analysed yet 26 Jun 2025
CVE-2025-2938 CVE record

CVSS 3.1 Low

Business Logic Errors in GitLab
- GitLab
- CWE-840
Not analysed yet 26 Jun 2025
CVE-2025-3279 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 26 Jun 2025
CVE-2025-5315 CVE record

CVSS 4.3 Medium

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 26 Jun 2025
CVE-2025-5846 CVE record

CVSS 2.7 Low

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 26 Jun 2025
CVE-2023-5600 CVE record

CVSS 3.1 Low

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 20 Jun 2025
CVE-2024-4994 CVE record

CVSS 8.1 High

Cross-Site Request Forgery (CSRF) in GitLab
- GitLab
- Cross-site request forgery (CSRF)
Not analysed yet 20 Jun 2025
CVE-2024-4025 CVE record

CVSS 6.5 Medium

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 20 Jun 2025
CVE-2025-2443 CVE record

CVSS 8.7 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 20 Jun 2025
CVE-2025-5121 CVE record

CVSS 8.5 HighCritical · CVSS 7+ and EPSS

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 20 Jun 2025
CVE-2024-7586 CVE record

CVSS 4.1 Medium

Insertion of Sensitive Information into Log File in GitLab
- GitLab
- Information disclosure
Not analysed yet 20 Jun 2025
CVE-2025-5982 CVE record

CVSS 3.7 Low

Insufficient Granularity of Access Control in GitLab
- GitLab
- CWE-1220
Not analysed yet 12 Jun 2025
CVE-2024-9512 CVE record

CVSS 5.3 Medium

Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab
- GitLab
- Race condition
Not analysed yet 12 Jun 2025
CVE-2025-0673 CVE record

CVSS 7.5 High

Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
- GitLab
- Denial of service
Not analysed yet 12 Jun 2025
CVE-2025-5195 CVE record

CVSS 4.3 Medium

Authorization Bypass Through User-Controlled Key in GitLab
- GitLab
- Broken access control
Not analysed yet 12 Jun 2025
CVE-2025-1478 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 12 Jun 2025
CVE-2025-1516 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 12 Jun 2025
CVE-2025-2254 CVE record

CVSS 8.7 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 12 Jun 2025
CVE-2025-4278 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 12 Jun 2025
CVE-2025-5996 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 12 Jun 2025
CVE-2025-1763 CVE record

CVSS 8.7 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 30 May 2025
CVE-2024-7803 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 23 May 2025
CVE-2024-9163 CVE record

CVSS 3.5 Low

User Interface (UI) Misrepresentation of Critical Information in GitLab
- GitLab
- CWE-451
Not analysed yet 23 May 2025
CVE-2024-12093 CVE record

CVSS 6.8 Medium

Improper Validation of Consistency within Input in GitLab
- GitLab
- CWE-1288
Not analysed yet 22 May 2025
CVE-2025-0605 CVE record

CVSS 4.6 Medium

Weak Authentication in GitLab
- GitLab
- Authentication bypass
Not analysed yet 22 May 2025
CVE-2025-0679 CVE record

CVSS 4.3 Medium

Exposure of Private Personal Information to an Unauthorized Actor in GitLab
- GitLab
- Information disclosure
Not analysed yet 22 May 2025
CVE-2025-0993 CVE record

CVSS 7.5 High

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 22 May 2025
CVE-2025-1110 CVE record

CVSS 2.7 Low

Insufficient Granularity of Access Control in GitLab
- GitLab
- CWE-1220
Not analysed yet 22 May 2025
CVE-2025-2853 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 22 May 2025
CVE-2025-3111 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 22 May 2025
CVE-2025-4979 CVE record

CVSS 4.9 Medium

Insufficient Granularity of Access Control in GitLab
- GitLab
- CWE-1220
Not analysed yet 22 May 2025
CVE-2024-8973 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 9 May 2025
CVE-2025-0549 CVE record

CVSS 6.8 Medium

Authentication Bypass Using an Alternate Path or Channel in GitLab
- GitLab
- Authentication bypass
Not analysed yet 9 May 2025
CVE-2025-1278 CVE record

CVSS 5.3 Medium

Insufficient Granularity of Access Control in GitLab
- GitLab
- CWE-1220
Not analysed yet 9 May 2025