Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GitLab — Vulnerabilities & Security Advisories 1083

All 1083 CVE vulnerabilities found in GitLab, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting GitLab, organized by vendor, product, and Common Weakness Enumeration (CWE) classification tags. It collects a comprehensive history of disclosed issues, spanning the full period during which GitLab has been commercially available, including both open-source and self-managed enterprise editions. Readers can use this resource to track the vendor's published security advisories, understand the frequency and severity trends of specific weakness classes, and review the complete vulnerability timeline for the GitLab platform. The data presented helps security teams identify recurring patterns, such as memory corruption or authentication flaws, without requiring individual lookups of separate CVE records. By consolidating these records, the page provides a structured overview of the product’s security posture, facilitating risk assessment and comparative analysis against other systems.

Vendor: GitLab

CVE ID Title CVSS Severity Published
CVE-2024-5067 Exposure of Sensitive Information to an Unauthorized Actor in GitLab CWE-200 4.4 Medium 2024-07-24
CVE-2024-7060 Exposure of Sensitive Information to an Unauthorized Actor in GitLab CWE-200 2.6 Low 2024-07-24
CVE-2024-7091 Exposure of Sensitive Information to an Unauthorized Actor in GitLab CWE-200 4.1 Medium 2024-07-24
CVE-2024-6595 Uncontrolled Search Path Element in GitLab CWE-451 3.0 Low 2024-07-17
CVE-2024-2880 Improper Access Control in GitLab CWE-284 2.7 Low 2024-07-11
CVE-2024-5257 Improper Access Control in GitLab CWE-284 4.9 Medium 2024-07-11
CVE-2024-5470 Improper Access Control in GitLab CWE-284 3.8 Low 2024-07-11
CVE-2024-6385 Improper Access Control in GitLab CWE-284 9.6 Critical 2024-07-11
CVE-2024-2177 Improper Restriction of Rendered UI Layers or Frames in GitLab CWE-1021 6.8 Medium 2024-07-09
CVE-2024-1493 Uncontrolled Resource Consumption in GitLab CWE-1333 6.5 Medium 2024-06-26
CVE-2024-1816 Uncontrolled Resource Consumption in GitLab CWE-400 5.3 Medium 2024-06-26
CVE-2024-2191 Improper Access Control in GitLab CWE-284 5.3 Medium 2024-06-26
CVE-2024-3115 Exposure of Sensitive Information to an Unauthorized Actor in GitLab CWE-862 4.3 Medium 2024-06-26
CVE-2024-3959 Improper Authorization in GitLab CWE-285 6.5 Medium 2024-06-26
CVE-2024-4011 Improper Access Control in GitLab CWE-863 3.1 Low 2024-06-26
CVE-2024-4557 Uncontrolled Resource Consumption in GitLab CWE-400 6.5 Medium 2024-06-26
CVE-2024-4901 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2024-06-26
CVE-2024-5655 Improper Access Control in GitLab CWE-284 9.6 Critical 2024-06-26
CVE-2024-5430 Improper Access Control in GitLab CWE-284 6.8 Medium 2024-06-26
CVE-2024-6323 Improper Isolation or Compartmentalization in GitLab CWE-863 7.5 High 2024-06-26
CVE-2024-5469 Uncontrolled Resource Consumption in GitLab CWE-754 3.1 Low 2024-06-14
CVE-2024-1736 Uncontrolled Resource Consumption in GitLab CWE-1333 6.5 Medium 2024-06-12
CVE-2024-1495 Uncontrolled Resource Consumption in GitLab CWE-1333 6.5 Medium 2024-06-12
CVE-2024-1963 Uncontrolled Resource Consumption in GitLab CWE-1333 6.5 Medium 2024-06-12
CVE-2024-4201 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 4.4 Medium 2024-06-12
CVE-2024-5318 Missing Authorization in GitLab CWE-862 4.0 Medium 2024-05-24
CVE-2023-6502 Inefficient Regular Expression Complexity in GitLab CWE-1333 4.3 Medium 2024-05-23
CVE-2023-7045 Cross-Site Request Forgery (CSRF) in GitLab CWE-352 5.4 Medium 2024-05-23
CVE-2024-1947 Improper Handling of Highly Compressed Data (Data Amplification) in GitLab CWE-409 4.3 Medium 2024-05-23
CVE-2024-5258 Authorization Bypass Through User-Controlled Key in GitLab CWE-639 4.4 Medium 2024-05-23

All 1083 known CVE vulnerabilities affecting GitLab with full Chinese analysis, references, and POCs where available.