Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GitLab — Vulnerabilities & Security Advisories 1083

All 1083 CVE vulnerabilities found in GitLab, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting GitLab, organized by vendor, product, and Common Weakness Enumeration (CWE) classification tags. It collects a comprehensive history of disclosed issues, spanning the full period during which GitLab has been commercially available, including both open-source and self-managed enterprise editions. Readers can use this resource to track the vendor's published security advisories, understand the frequency and severity trends of specific weakness classes, and review the complete vulnerability timeline for the GitLab platform. The data presented helps security teams identify recurring patterns, such as memory corruption or authentication flaws, without requiring individual lookups of separate CVE records. By consolidating these records, the page provides a structured overview of the product’s security posture, facilitating risk assessment and comparative analysis against other systems.

Vendor: GitLab

CVE ID Title CVSS Severity Published
CVE-2024-12303 Incorrect Privilege Assignment in GitLab CWE-266 6.7 Medium 2025-08-13
CVE-2025-1477 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-08-13
CVE-2025-2498 Insufficient Granularity of Access Control in GitLab CWE-1220 3.1 Low 2025-08-13
CVE-2025-2614 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-08-13
CVE-2025-2937 Inefficient Regular Expression Complexity in GitLab CWE-1333 6.5 Medium 2025-08-13
CVE-2025-5819 Incorrect Permission Assignment for Critical Resource in GitLab CWE-732 5.0 Medium 2025-08-13
CVE-2025-6186 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2025-08-13
CVE-2025-7739 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2025-08-13
CVE-2025-7734 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2025-08-13
CVE-2025-8770 Authorization Bypass Through User-Controlled Key in GitLab CWE-639 6.5 Medium 2025-08-13
CVE-2025-0765 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2025-07-24
CVE-2025-1299 Missing Authorization in GitLab CWE-862 4.3 Medium 2025-07-24
CVE-2025-4976 Exposure of Sensitive Information Due to Incompatible Policies in GitLab CWE-213 4.3 Medium 2025-07-24
CVE-2025-7001 Insufficient Granularity of Access Control in GitLab CWE-1220 4.3 Medium 2025-07-24
CVE-2025-4439 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 7.7 High 2025-07-23
CVE-2025-4700 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2025-07-23
CVE-2025-3396 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2025-07-10
CVE-2025-4972 Incorrect Authorization in GitLab CWE-863 2.7 Low 2025-07-10
CVE-2025-6168 Incorrect Authorization in GitLab CWE-863 2.7 Low 2025-07-10
CVE-2025-6948 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2025-07-10
CVE-2025-1754 Missing Authentication for Critical Function in GitLab CWE-306 5.3 Medium 2025-06-26
CVE-2025-2938 Business Logic Errors in GitLab CWE-840 3.1 Low 2025-06-26
CVE-2025-3279 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-06-26
CVE-2025-5315 Missing Authorization in GitLab CWE-862 4.3 Medium 2025-06-26
CVE-2025-5846 Missing Authorization in GitLab CWE-862 2.7 Low 2025-06-26
CVE-2023-5600 Missing Authorization in GitLab CWE-862 3.1 Low 2025-06-20
CVE-2024-4994 Cross-Site Request Forgery (CSRF) in GitLab CWE-352 8.1 High 2025-06-20
CVE-2024-4025 Inefficient Regular Expression Complexity in GitLab CWE-1333 6.5 Medium 2025-06-20
CVE-2025-2443 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2025-06-20
CVE-2025-5121 Missing Authorization in GitLab CWE-862 8.5 High 2025-06-20

All 1083 known CVE vulnerabilities affecting GitLab with full Chinese analysis, references, and POCs where available.