GI
DevOps
GitLab
On CISA KEVExploited in the wildRansomware-linked
1,509
CVEs
6
On KEV
10.0
Max CVSS
37
New 30D
Severity mix
Critical 70High 357Medium 73Low 0
Watch
Add GitLab to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-5069 | 6.5 | Sep 26 | Incorrect Ownership Assignment in GitLab Affected: 17.10 before 18.2.7; 18.3 before 18.3.3; 18.4 before 18.4.1 |
| CVE-2025-10867 | 6.5 | Sep 26 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 18.1 before 18.2.7; 18.3 before 18.3.3; 18.4 before 18.4.1 |
| CVE-2025-1250 | 6.5 | Sep 12 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 15.0 before 18.1.6; 18.2 before 18.2.6; 18.3 before 18.3.2 |
| CVE-2025-7337 | 6.5 | Sep 12 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 7.8 before 18.1.6; 18.2 before 18.2.6; 18.3 before 18.3.2 |
| CVE-2025-10094 | 6.5 | Sep 12 | Improper Validation of Specified Quantity in Input in GitLab Affected: 10.7 before 18.1.6; 18.2 before 18.2.6; 18.3 before 18.3.2 |
| CVE-2025-3601 | 6.5 | Aug 27 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 8.15 before 18.1.5; 18.2 before 18.2.5; 18.3 before 18.3.1 |
| CVE-2024-10219 | 6.5 | Aug 13 | Incorrect Authorization in GitLab Affected: 15.6 before 18.0.6; 18.1 before 18.1.4; 18.2 before 18.2.2 |
| CVE-2025-2614 | 6.5 | Aug 13 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 11.6 before 18.0.6; 18.1 before 18.1.4; 18.2 before 18.2.2 |
| CVE-2025-2937 | 6.5 | Aug 13 | Inefficient Regular Expression Complexity in GitLab Affected: 13.2 before 18.0.6; 18.1 before 18.1.4; 18.2 before 18.2.2 |
| CVE-2025-8770 | 6.5 | Aug 13 | Authorization Bypass Through User-Controlled Key in GitLab Affected: 18.0 before 18.0.6; 18.1 before 18.1.4; 18.2 before 18.2.2 |
| CVE-2025-3279 | 6.5 | Jun 26 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 10.7 before 17.11.5; 18.0 before 18.0.3; 18.1 before 18.1.1 |
| CVE-2025-5996 | 6.5 | Jun 12 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 2.10 before 17.10.7; 17.11 before 17.11.3; 18.0 before 18.0.1 |
| CVE-2025-0993 | 6.5 | May 22 | Allocation of Resources Without Limits or Throttling in GitLab Affected: before 17.10.7; 17.11 before 17.11.3; 18.0 before 18.0.1 |
| CVE-2025-2853 | 6.5 | May 22 | Allocation of Resources Without Limits or Throttling in GitLab Affected: before 17.10.7; 17.11 before 17.11.3; 18.0 before 18.0.1 |
| CVE-2025-3111 | 6.5 | May 22 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 10.2 before 17.10.7; 17.11 before 17.11.3; 18.0 before 18.0.1 |
| CVE-2025-0362 | 6.5 | Apr 10 | Improper Restriction of Rendered UI Layers or Frames in GitLab Affected: 7.7 before 17.8.7; 17.9 before 17.9.6; 17.10 before 17.10.4 |
| CVE-2024-12619 | 6.5 | Mar 28 | Insufficient Granularity of Access Control in GitLab Affected: 16.0 before 17.8.6; 17.9 before 17.9.3; 17.10 before 17.10.1 |
| CVE-2025-2867 | 6.5 | Mar 27 | Improper Control of Generation of Code ('Code Injection') in GitLab Affected: 17.8 before 17.8.6; 17.9 before 17.9.3; 17.10 before 17.10.1 |
| CVE-2024-13054 | 6.5 | Mar 13 | Allocation of Resources Without Limits or Throttling in GitLab Affected: before 17.7.7; 17.8 before 17.8.5; 17.9 before 17.9.2 |
| CVE-2025-0652 | 6.5 | Mar 13 | Incorrect Authorization in GitLab Affected: 16.9 before 17.7.7; 17.8 before 17.8.5; 17.9 before 17.9.2 |
| CVE-2024-12379 | 6.5 | Feb 12 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 14.1 before 17.6.5; 17.7 before 17.7.4; 17.8 before 17.8.2 |
| CVE-2025-1072 | 6.5 | Feb 7 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 7.14.1 before 17.3.7; 17.4 before 17.4.4; 17.5 before 17.5.2 |
| CVE-2024-3976 | 6.5 | Feb 5 | Missing Authorization in GitLab Affected: 14.0 before 16.9.7; 16.10 before 16.10.5; 16.11 before 16.11.2 |
The 500 most important CVEs for this product (exploited first, then by severity)