Gitlab

GitLab

1474 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2025-13929

  • EPSS 0.52%
  • Veröffentlicht 11.03.2026 16:16:19
  • Zuletzt bearbeitet 13.03.2026 12:33:51

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.0 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service by issuing specially crafted reques...

7.5

CVE-2025-14513

  • EPSS 0.48%
  • Veröffentlicht 11.03.2026 16:16:19
  • Zuletzt bearbeitet 13.03.2026 12:34:46

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service condition due to improper input va...

6.5

CVE-2025-12576

  • EPSS 0.39%
  • Veröffentlicht 11.03.2026 16:16:18
  • Zuletzt bearbeitet 18.03.2026 13:35:10

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that under certain conditions could have allowed an authenticated user to cause a denial of service due to improp...

4.4

CVE-2025-12697

  • EPSS 0.29%
  • Veröffentlicht 11.03.2026 16:16:18
  • Zuletzt bearbeitet 17.03.2026 20:59:44

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials...

4.3

CVE-2025-12704

  • EPSS 0.22%
  • Veröffentlicht 11.03.2026 16:16:18
  • Zuletzt bearbeitet 17.03.2026 20:59:11

GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to access Virtual Registry data in groups where they are not members ...

6.5

CVE-2025-13690

  • EPSS 0.39%
  • Veröffentlicht 11.03.2026 16:16:18
  • Zuletzt bearbeitet 13.03.2026 12:32:53

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to cause a denial of service condition due to improper input vali...

4.3

CVE-2025-12555

Exploit
  • EPSS 0.24%
  • Veröffentlicht 11.03.2026 16:07:15
  • Zuletzt bearbeitet 13.03.2026 13:22:06

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that, under certain conditions, could have allowed an authenticated user to access previous pipeline job informa...

4.3

CVE-2026-1732

Exploit
  • EPSS 0.25%
  • Veröffentlicht 11.03.2026 15:37:26
  • Zuletzt bearbeitet 13.03.2026 13:23:22

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to disclose confidential issue titles due to improper filtering un...

5

CVE-2026-3848

  • EPSS 0.19%
  • Veröffentlicht 11.03.2026 15:37:11
  • Zuletzt bearbeitet 16.04.2026 16:38:34

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to make unintended internal requests through proxy environments un...

7.5

CVE-2025-14511

Exploit
  • EPSS 0.35%
  • Veröffentlicht 25.02.2026 20:05:24
  • Zuletzt bearbeitet 28.02.2026 00:44:30

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted files to...