Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GitLab — Vulnerabilities & Security Advisories 1083

All 1083 CVE vulnerabilities found in GitLab, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting GitLab, organized by vendor, product, and Common Weakness Enumeration (CWE) classification tags. It collects a comprehensive history of disclosed issues, spanning the full period during which GitLab has been commercially available, including both open-source and self-managed enterprise editions. Readers can use this resource to track the vendor's published security advisories, understand the frequency and severity trends of specific weakness classes, and review the complete vulnerability timeline for the GitLab platform. The data presented helps security teams identify recurring patterns, such as memory corruption or authentication flaws, without requiring individual lookups of separate CVE records. By consolidating these records, the page provides a structured overview of the product’s security posture, facilitating risk assessment and comparative analysis against other systems.

Vendor: GitLab

CVE ID Title CVSS Severity Published
CVE-2023-6736 Inefficient Regular Expression Complexity in GitLab CWE-1333 6.5 Medium 2024-02-07
CVE-2023-6840 Missing Authorization in GitLab CWE-862 6.7 Medium 2024-02-07
CVE-2024-1066 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2024-02-07
CVE-2023-5612 Missing Authorization in GitLab CWE-862 5.3 Medium 2024-01-26
CVE-2023-6159 Inefficient Regular Expression Complexity in GitLab CWE-1333 6.5 Medium 2024-01-26
CVE-2023-5933 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab CWE-80 6.4 Medium 2024-01-26
CVE-2024-0456 Direct Request ('Forced Browsing') in GitLab CWE-425 4.3 Medium 2024-01-26
CVE-2024-0402 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab CWE-22 9.9 Critical 2024-01-26
CVE-2023-2030 Improper Verification of Cryptographic Signature in GitLab CWE-347 3.5 Low 2024-01-12
CVE-2023-4812 Incorrect Authorization in GitLab CWE-863 7.6 High 2024-01-12
CVE-2023-5356 Incorrect Authorization in GitLab CWE-863 7.3 High 2024-01-12
CVE-2023-7028 Weak Password Recovery Mechanism for Forgotten Password in GitLab CWE-640 10.0 Critical 2024-01-12
CVE-2023-6955 Missing Authorization in GitLab CWE-862 6.6 Medium 2024-01-12
CVE-2023-3907 Improper User Management in GitLab CWE-286 4.9 Medium 2023-12-17
CVE-2023-3904 Improper Validation of Specified Type of Input in GitLab CWE-1287 4.3 Medium 2023-12-15
CVE-2023-5061 Missing Authorization in GitLab CWE-862 4.3 Medium 2023-12-15
CVE-2023-5512 Improper Control of Generation of Code ('Code Injection') in GitLab CWE-94 4.8 Medium 2023-12-15
CVE-2023-6051 Improper Control of Generation of Code ('Code Injection') in GitLab CWE-94 5.7 Medium 2023-12-15
CVE-2023-6680 Improper Certificate Validation in GitLab CWE-295 7.4 High 2023-12-15
CVE-2023-3511 Incorrect Authorization in GitLab CWE-863 2.0 Low 2023-12-15
CVE-2023-5332 Dependency on Vulnerable Third-Party Component in GitLab CWE-1395 5.9 Medium 2023-12-04
CVE-2023-3443 Incorrect Authorization in GitLab CWE-863 3.1 Low 2023-12-01
CVE-2023-3964 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2023-12-01
CVE-2023-3949 Insertion of Sensitive Information Into Sent Data in GitLab CWE-201 5.3 Medium 2023-12-01
CVE-2023-4317 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2023-12-01
CVE-2023-4658 Incorrect Authorization in GitLab CWE-863 3.1 Low 2023-12-01
CVE-2023-4912 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 2.6 Low 2023-12-01
CVE-2023-5226 Improper Control of Generation of Code ('Code Injection') in GitLab CWE-94 4.8 Medium 2023-12-01
CVE-2023-6033 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2023-12-01
CVE-2023-5995 Incorrect Authorization in GitLab CWE-863 4.4 Medium 2023-12-01

All 1083 known CVE vulnerabilities affecting GitLab with full Chinese analysis, references, and POCs where available.