Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GitLab — Vulnerabilities & Security Advisories 1083

All 1083 CVE vulnerabilities found in GitLab, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting GitLab, organized by vendor, product, and Common Weakness Enumeration (CWE) classification tags. It collects a comprehensive history of disclosed issues, spanning the full period during which GitLab has been commercially available, including both open-source and self-managed enterprise editions. Readers can use this resource to track the vendor's published security advisories, understand the frequency and severity trends of specific weakness classes, and review the complete vulnerability timeline for the GitLab platform. The data presented helps security teams identify recurring patterns, such as memory corruption or authentication flaws, without requiring individual lookups of separate CVE records. By consolidating these records, the page provides a structured overview of the product’s security posture, facilitating risk assessment and comparative analysis against other systems.

Vendor: GitLab

CVE ID Title CVSS Severity Published
CVE-2025-1677 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-04-10
CVE-2025-2408 Insufficient Granularity of Access Control in GitLab CWE-1220 5.3 Medium 2025-04-10
CVE-2024-10307 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 4.3 Medium 2025-03-28
CVE-2024-12619 Insufficient Granularity of Access Control in GitLab CWE-1220 5.2 Medium 2025-03-28
CVE-2025-2867 Improper Control of Generation of Code ('Code Injection') in GitLab CWE-94 4.4 Medium 2025-03-27
CVE-2024-9773 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab CWE-77 3.7 Low 2025-03-27
CVE-2025-0811 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2025-03-27
CVE-2025-2242 Incorrect Authorization in GitLab CWE-863 7.5 High 2025-03-27
CVE-2025-2255 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2025-03-27
CVE-2024-7296 Incorrect Authorization in GitLab CWE-863 2.7 Low 2025-03-13
CVE-2025-1257 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-03-13
CVE-2024-8402 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab CWE-77 3.7 Low 2025-03-13
CVE-2024-12380 Generation of Error Message Containing Sensitive Information in GitLab CWE-209 4.4 Medium 2025-03-13
CVE-2024-13054 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-03-13
CVE-2025-0652 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2025-03-13
CVE-2025-2045 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2025-03-06
CVE-2025-1540 Incorrect Authorization in GitLab CWE-863 3.1 Low 2025-03-06
CVE-2025-0555 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 7.7 High 2025-03-03
CVE-2024-10925 Authorization Bypass Through User-Controlled Key in GitLab CWE-639 5.3 Medium 2025-03-03
CVE-2025-0475 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2025-03-03
CVE-2024-8186 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 5.4 Medium 2025-03-03
CVE-2024-3303 Improper Neutralization of Input Used for LLM Prompting in GitLab CWE-1427 6.4 Medium 2025-02-13
CVE-2025-1198 Insufficient Session Expiration in GitLab CWE-613 4.2 Medium 2025-02-13
CVE-2024-7102 Execution with Unnecessary Privileges in GitLab CWE-250 9.6 Critical 2025-02-13
CVE-2024-8266 Execution with Unnecessary Privileges in GitLab CWE-250 4.4 Medium 2025-02-13
CVE-2024-9870 Unintended Proxy or Intermediary ('Confused Deputy') in GitLab CWE-441 4.3 Medium 2025-02-12
CVE-2025-0516 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2025-02-12
CVE-2024-12379 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-02-12
CVE-2025-0376 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2025-02-12
CVE-2025-1212 Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab CWE-497 4.3 Medium 2025-02-12

All 1083 known CVE vulnerabilities affecting GitLab with full Chinese analysis, references, and POCs where available.