Gitlab

GitLab

1310 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2026-1182

Exploit
  • EPSS 0.03%
  • Veröffentlicht 12.03.2026 01:33:23
  • Zuletzt bearbeitet 13.03.2026 13:20:51

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.14 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to gain unauthorized access to confidential issue title created in...

4.3

CVE-2026-0602

  • EPSS 0.01%
  • Veröffentlicht 11.03.2026 16:16:22
  • Zuletzt bearbeitet 17.03.2026 20:59:01

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to disclose metadata from private issues, merge requests, epics, m...

7.5

CVE-2026-1069

  • EPSS 0.03%
  • Veröffentlicht 11.03.2026 16:16:22
  • Zuletzt bearbeitet 13.03.2026 12:35:38

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service by sending specially crafted GraphQL requests due to uncontrolled recursion und...

5.4

CVE-2026-1090

  • EPSS 0.06%
  • Veröffentlicht 11.03.2026 16:16:22
  • Zuletzt bearbeitet 13.03.2026 12:36:26

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user, when the `markdown_placeholders` feature flag was enabled, to inj...

6.5

CVE-2026-1230

  • EPSS 0.04%
  • Veröffentlicht 11.03.2026 16:16:22
  • Zuletzt bearbeitet 17.03.2026 20:55:04

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 1.0 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to cause repository downloads to contain different code than displa...

4.3

CVE-2026-1663

  • EPSS 0.01%
  • Veröffentlicht 11.03.2026 16:16:22
  • Zuletzt bearbeitet 13.03.2026 13:24:07

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with group import permissions to create labels in private projects...

7.5

CVE-2025-13929

  • EPSS 0.05%
  • Veröffentlicht 11.03.2026 16:16:19
  • Zuletzt bearbeitet 13.03.2026 12:33:51

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.0 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service by issuing specially crafted reques...

7.5

CVE-2025-14513

  • EPSS 0.04%
  • Veröffentlicht 11.03.2026 16:16:19
  • Zuletzt bearbeitet 13.03.2026 12:34:46

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service condition due to improper input va...

6.5

CVE-2025-12576

  • EPSS 0.04%
  • Veröffentlicht 11.03.2026 16:16:18
  • Zuletzt bearbeitet 18.03.2026 13:35:10

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that under certain conditions could have allowed an authenticated user to cause a denial of service due to improp...

4.4

CVE-2025-12697

  • EPSS 0.01%
  • Veröffentlicht 11.03.2026 16:16:18
  • Zuletzt bearbeitet 17.03.2026 20:59:44

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials...