GI
DevOps
GitLab
On CISA KEVExploited in the wildRansomware-linked
1,508
CVEs
5
On KEV
10.0
Max CVSS
37
New 30D
Severity mix
Critical 70High 356Medium 74Low 0
Watch
Add GitLab to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-9163 | 7.5 | May 23 | User Interface (UI) Misrepresentation of Critical Information in GitLab Affected: 12.1 before 17.10.7; 17.11 before 17.11.3; 18.0 before 18.0.1 |
| CVE-2025-4979 | 7.5 | May 22 | Insufficient Granularity of Access Control in GitLab Affected: before 17.10.7; 17.11 before 17.11.3; 18.0 before 18.0.1 |
| CVE-2024-8973 | 7.5 | May 9 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 17.1 before 17.9.8; 17.10 before 17.10.6; 17.11 before 17.11.2 |
| CVE-2025-1278 | 7.5 | May 9 | Insufficient Granularity of Access Control in GitLab Affected: 12.0 before 17.9.8; 17.10 before 17.10.6; 17.11 before 17.11.2 |
| CVE-2025-0639 | 7.5 | Apr 24 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 16.7 before 17.9.7; 17.10 before 17.10.5; 17.11 before 17.11.1 |
| CVE-2024-11129 | 7.5 | Apr 10 | Generation of Error Message Containing Sensitive Information in GitLab Affected: 17.1 before 17.8.7; 17.9 before 17.9.6; 17.10 before 17.10.4 |
| CVE-2025-1677 | 7.5 | Apr 10 | Allocation of Resources Without Limits or Throttling in GitLab Affected: before 17.8.7; 17.9 before 17.9.6; 17.10 before 17.10.4 |
| CVE-2025-1257 | 7.5 | Mar 13 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 12.3 before 17.7.7; 17.8 before 17.8.5; 17.9 before 17.9.2 |
| CVE-2024-12380 | 7.5 | Mar 13 | Generation of Error Message Containing Sensitive Information in GitLab Affected: 11.5 before 17.7.7; 17.8 before 17.8.5; 17.9 before 17.9.2 |
| CVE-2024-7102 | 7.5 | Feb 13 | Execution with Unnecessary Privileges in GitLab Affected: 16.4 before 17.5.0 |
| CVE-2025-1212 | 7.5 | Feb 12 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab Affected: 8.3 before 17.6.5; 17.7 before 17.7.4; 17.8 before 17.8.2 |
| CVE-2025-1042 | 7.5 | Feb 12 | Files or Directories Accessible to External Parties in GitLab Affected: 15.7 before 17.6.5; 17.7 before 17.7.4; 17.8 before 17.8.2 |
| CVE-2024-2878 | 7.5 | Feb 5 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 15.7 before 16.9.7; 16.10 before 16.10.5; 16.11 before 16.11.2 |
| CVE-2024-9631 | 7.5 | Feb 5 | Inefficient Algorithmic Complexity in GitLab Affected: 13.6 before 17.2.9; 17.3 before 17.3.5; 17.4 before 17.4.2 |
| CVE-2023-6386 | 7.5 | Feb 5 | Allocation of Resources Without Limits or Throttling in GitLab Affected: 15.11 before 16.6.7; 16.7 before 16.7.5; 16.8 before 16.8.2 |
| CVE-2024-8233 | 7.5 | Dec 12 | Inefficient Algorithmic Complexity in GitLab Affected: 9.4 before 17.4.6; 17.5 before 17.5.4; 17.6 before 17.6.2 |
| CVE-2024-11828 | 7.5 | Nov 26 | Inefficient Algorithmic Complexity in GitLab Affected: 13.2.4 before 17.4.5; 17.5 before 17.5.3; 17.6 before 17.6.1 |
| CVE-2024-11669 | 7.5 | Nov 26 | Incorrect Authorization in GitLab Affected: 16.9.8 before 17.4.5; 17.5 before 17.5.3; 17.6 before 17.6.1 |
| CVE-2024-8177 | 7.5 | Nov 26 | Inefficient Algorithmic Complexity in GitLab Affected: 15.6 before 17.4.5; 17.5 before 17.5.3; 17.6 before 17.6.1 |
| CVE-2024-8237 | 7.5 | Nov 26 | Inefficient Algorithmic Complexity in GitLab Affected: 12.6 before 17.4.5; 17.5 before 17.5.3; 17.6 before 17.6.1 |
| CVE-2024-9633 | 7.5 | Nov 14 | Incorrect Ownership Assignment in GitLab Affected: 16.3 before 17.4.2; 17.5 before 17.5.4; 17.6 before 17.6.2 |
| CVE-2024-4660 | 7.5 | Sep 12 | Missing Authorization in GitLab Affected: 11.2 before 17.1.7; 17.2 before 17.2.5; 17.3 before 17.3.2 |
| CVE-2024-8124 | 7.5 | Sep 12 | Inefficient Regular Expression Complexity in GitLab Affected: 16.4 before 17.1.7; 17.2 before 17.2.5; 17.3 before 17.3.2 |
| CVE-2024-2800 | 7.5 | Aug 8 | Uncontrolled Resource Consumption in GitLab Affected: 11.3 before 17.0.6; 17.1 before 17.1.4; 17.2 before 17.2.2 |
| CVE-2024-6329 | 7.5 | Aug 8 | Improper Encoding or Escaping of Output in GitLab Affected: 8.16 before 17.0.6; 17.1 before 17.1.4; 17.2 before 17.2.2 |
| CVE-2024-6323 | 7.5 | Jun 26 | Improper Isolation or Compartmentalization in GitLab Affected: 16.11.0 before 16.11.5; 17.0.0 before 17.0.3; 17.1.0 before 17.1.1 |
| CVE-2024-2829 | 7.5 | Apr 25 | Inefficient Regular Expression Complexity in GitLab Affected: 12.5 before 16.9.6; 16.10 before 16.10.4; 16.11 before 16.11.1 |
| CVE-2023-3904 | 7.5 | Dec 15 | An issue has been discovered in GitLab EE affecting all versions starting before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before… Affected: before 16.4.4; 16.5 before 16.5.4; 16.6 before 16.6.2 |
| CVE-2023-5995 | 7.5 | Dec 1 | An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6… Affected: 16.2.0 before 16.4.3; 16.5.0 before 16.5.3; 16.6.0 |
| CVE-2023-5226 | 7.5 | Dec 1 | An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1 Affected: before 16.4.3; before 16.4.3; 16.5.0 before 16.5.3; 16.5.0 before 16.5.3; 16.6.0; 16.6.0 |
| CVE-2023-4379 | 7.5 | Nov 9 | Incorrect Authorization in GitLab Affected: 15.3 before 16.2.8; 16.3 before 16.3.5; 16.4 before 16.4.1 |
| CVE-2023-5106 | 7.5 | Oct 2 | An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could… Affected: 13.12 before 16.2.8; 16.3.0 before 16.3.5; 16.4.0 |
| CVE-2023-3413 | 7.5 | Sep 29 | An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4… Affected: 16.2 before 16.2.8; 16.2 before 16.2.8; 16.3.0 before 16.3.5; 16.3.0 before 16.3.5; 16.4.0; 16.4.0 |
| CVE-2023-3917 | 7.5 | Sep 29 | Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cause pipelines to… Affected: before 16.2.8; before 16.2.8; 16.3.0 before 16.3.5; 16.3.0 before 16.3.5; 16.4.0; 16.4.0 |
| CVE-2023-4647 | 7.5 | Sep 1 | An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3… Affected: 15.2.0 before 16.1.5; 15.2.0 before 16.1.5; 16.2 before 16.2.5; 16.2 before 16.2.5; 16.3.0; 16.3.0 |
| CVE-2023-4011 | 7.5 | Aug 2 | An issue has been discovered in GitLab EE affecting all versions from 15.11 prior to 16.2.2 which allows an attacker to spike the resource consumption resulting in DoS Affected: 15.11 before 16.2.2; 15.11 before 16.2.2 |
| CVE-2023-3994 | 7.5 | Aug 2 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2… Affected: 9.3 before 16.0.8; 9.3 before 16.0.8; 16.1 before 16.1.3; 16.1 before 16.1.3; 16.2 before 16.2.2; 16.2 before 16.2.2 |
| CVE-2023-3993 | 7.5 | Aug 2 | An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2… Affected: 14.3 before 16.0.8; 14.3 before 16.0.8; 16.1 before 16.1.3; 16.1 before 16.1.3; 16.2 before 16.2.2; 16.2 before 16.2.2 |
| CVE-2023-3900 | 7.5 | Aug 2 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2 Affected: 16.1 before 16.1.3; 16.1 before 16.1.3; 16.2 before 16.2.2; 16.2 before 16.2.2 |
| CVE-2023-3364 | 7.5 | Aug 2 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from… Affected: 8.14 before 16.0.8; 8.14 before 16.0.8; 16.1 before 16.1.3; 16.1 before 16.1.3; 16.2 before 16.2.2; 16.2 before 16.2.2 |
| CVE-2023-0632 | 7.5 | Aug 2 | An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2… Affected: 15.2 before 16.0.8; 15.2 before 16.0.8; 16.1 before 16.1.3; 16.1 before 16.1.3; 16.2 before 16.2.2; 16.2 before 16.2.2 |
| CVE-2023-3424 | 7.5 | Jul 13 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.3 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from… Affected: 10.3.0 before 15.11.10; 10.3.0 before 15.11.10; 16.0.0 before 16.0.6; 16.0.0 before 16.0.6; 16.1.0 before 16.1.1; 16.1.0 before 16.1.1 |
| CVE-2023-2199 | 7.5 | Jun 7 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.0 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from… Affected: 12.0.0 before 15.10.8; 12.0.0 before 15.10.8; 15.11.0 before 15.11.7; 15.11.0 before 15.11.7; 16.0.0 before 16.0.2; 16.0.0 before 16.0.2 |
| CVE-2023-2198 | 7.5 | Jun 7 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.7 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from… Affected: 8.7.0 before 15.10.8; 8.7.0 before 15.10.8; 15.11.0 before 15.11.7; 15.11.0 before 15.11.7; 16.0.0 before 16.0.2; 16.0.0 before 16.0.2 |
| CVE-2023-0121 | 7.5 | Jun 7 | A denial of service issue was discovered in GitLab CE/EE affecting all versions starting from 13.2.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions… Affected: 13.2.4 before 15.10.8; 13.2.4 before 15.10.8; 15.11.0 before 15.11.7; 15.11.0 before 15.11.7; 16.0.0 before 16.0.2; 16.0.0 before 16.0.2 |
| CVE-2023-2132 | 7.5 | Jun 6 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from… Affected: 15.4.0 before 15.10.8; 15.4.0 before 15.10.8; 15.11.0 before 15.11.7; 15.11.0 before 15.11.7; 16.0.0 before 16.0.2; 16.0.0 before 16.0.2 |
| CVE-2023-2825 | 7.5 | May 26 | An issue has been discovered in GitLab CE/EE affecting only version 16.0.0 Affected: 16.0.0; 16.0.0 |
| CVE-2018-17455 | 7.5 | Apr 15 | An issue was discovered in GitLab Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1 Affected: before 11.1.7; before 11.1.7; 11.2.0 before 11.2.4; 11.2.0 before 11.2.4; 11.3.0; 11.3.0 |
| CVE-2018-17449 | 7.5 | Apr 15 | An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1 Affected: before 11.1.7; before 11.1.7; 11.2.0 before 11.2.4; 11.2.0 before 11.2.4; 11.3.0; 11.3.0 |
| CVE-2018-15472 | 7.5 | Apr 15 | An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1 Affected: before 11.1.7; before 11.1.7; 11.2.0 before 11.2.4; 11.2.0 before 11.2.4; 11.3.0; 11.3.0 |
The 500 most important CVEs for this product (exploited first, then by severity)