Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GitLab — Vulnerabilities & Security Advisories 1083

All 1083 CVE vulnerabilities found in GitLab, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting GitLab, organized by vendor, product, and Common Weakness Enumeration (CWE) classification tags. It collects a comprehensive history of disclosed issues, spanning the full period during which GitLab has been commercially available, including both open-source and self-managed enterprise editions. Readers can use this resource to track the vendor's published security advisories, understand the frequency and severity trends of specific weakness classes, and review the complete vulnerability timeline for the GitLab platform. The data presented helps security teams identify recurring patterns, such as memory corruption or authentication flaws, without requiring individual lookups of separate CVE records. By consolidating these records, the page provides a structured overview of the product’s security posture, facilitating risk assessment and comparative analysis against other systems.

Vendor: GitLab

CVE ID Title CVSS Severity Published
CVE-2024-7586 Insertion of Sensitive Information into Log File in GitLab CWE-532 4.1 Medium 2025-06-20
CVE-2025-5982 Insufficient Granularity of Access Control in GitLab CWE-1220 3.7 Low 2025-06-12
CVE-2024-9512 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab CWE-367 5.3 Medium 2025-06-12
CVE-2025-0673 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab CWE-835 7.5 High 2025-06-12
CVE-2025-5195 Authorization Bypass Through User-Controlled Key in GitLab CWE-639 4.3 Medium 2025-06-12
CVE-2025-1478 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-06-12
CVE-2025-1516 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-06-12
CVE-2025-2254 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2025-06-12
CVE-2025-4278 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab CWE-80 8.7 High 2025-06-12
CVE-2025-5996 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-06-12
CVE-2025-1763 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2025-05-30
CVE-2024-7803 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-05-23
CVE-2024-9163 User Interface (UI) Misrepresentation of Critical Information in GitLab CWE-451 3.5 Low 2025-05-23
CVE-2024-12093 Improper Validation of Consistency within Input in GitLab CWE-1288 6.8 Medium 2025-05-22
CVE-2025-0605 Weak Authentication in GitLab CWE-1390 4.6 Medium 2025-05-22
CVE-2025-0679 Exposure of Private Personal Information to an Unauthorized Actor in GitLab CWE-359 4.3 Medium 2025-05-22
CVE-2025-0993 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 7.5 High 2025-05-22
CVE-2025-1110 Insufficient Granularity of Access Control in GitLab CWE-1220 2.7 Low 2025-05-22
CVE-2025-2853 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-05-22
CVE-2025-3111 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-05-22
CVE-2025-4979 Insufficient Granularity of Access Control in GitLab CWE-1220 4.9 Medium 2025-05-22
CVE-2024-8973 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-05-09
CVE-2025-0549 Authentication Bypass Using an Alternate Path or Channel in GitLab CWE-288 6.8 Medium 2025-05-09
CVE-2025-1278 Insufficient Granularity of Access Control in GitLab CWE-1220 5.3 Medium 2025-05-09
CVE-2024-12244 Missing Authorization in GitLab CWE-862 4.3 Medium 2025-04-24
CVE-2025-0639 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-04-24
CVE-2025-1908 Business Logic Errors in GitLab CWE-840 7.7 High 2025-04-24
CVE-2025-0362 Improper Restriction of Rendered UI Layers or Frames in GitLab CWE-1021 6.4 Medium 2025-04-10
CVE-2025-2469 Debug Messages Revealing Unnecessary Information in GitLab CWE-1295 3.7 Low 2025-04-10
CVE-2024-11129 Generation of Error Message Containing Sensitive Information in GitLab CWE-209 6.3 Medium 2025-04-10

All 1083 known CVE vulnerabilities affecting GitLab with full Chinese analysis, references, and POCs where available.