Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GitLab — Vulnerabilities & Security Advisories 1083

All 1083 CVE vulnerabilities found in GitLab, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting GitLab, organized by vendor, product, and Common Weakness Enumeration (CWE) classification tags. It collects a comprehensive history of disclosed issues, spanning the full period during which GitLab has been commercially available, including both open-source and self-managed enterprise editions. Readers can use this resource to track the vendor's published security advisories, understand the frequency and severity trends of specific weakness classes, and review the complete vulnerability timeline for the GitLab platform. The data presented helps security teams identify recurring patterns, such as memory corruption or authentication flaws, without requiring individual lookups of separate CVE records. By consolidating these records, the page provides a structured overview of the product’s security posture, facilitating risk assessment and comparative analysis against other systems.

Vendor: GitLab

CVE ID Title CVSS Severity Published
CVE-2025-10903 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab CWE-835 6.5 Medium 2026-08-26
CVE-2026-3035 Authentication Bypass Using an Alternate Path or Channel in GitLab CWE-288 5.5 Medium 2026-08-26
CVE-2026-7487 Access Control Check Implemented After Asset is Accessed in GitLab CWE-1280 3.5 Low 2026-08-26
CVE-2026-15387 Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab CWE-349 4.3 Medium 2026-08-26
CVE-2026-18252 Inclusion of Functionality from Untrusted Control Sphere in GitLab CWE-829 7.3 High 2026-08-26
CVE-2026-77801 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-08-26
CVE-2026-10053 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab CWE-22 8.5 High 2026-08-23
CVE-2026-19650 Cross-Site Request Forgery (CSRF) in GitLab CWE-352 7.1 High 2026-08-17
CVE-2026-19478 Improper Control of Generation of Code ('Code Injection') in GitLab CWE-94 9.4 Critical 2026-08-17
CVE-2025-9486 Incorrect Privilege Assignment in GitLab CWE-266 3.3 Low 2026-08-12
CVE-2026-4879 Missing Authorization in GitLab CWE-862 4.3 Medium 2026-08-12
CVE-2026-6821 Missing Authorization in GitLab CWE-862 4.3 Medium 2026-08-12
CVE-2026-15217 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2026-08-12
CVE-2026-15216 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2026-08-12
CVE-2026-16494 Missing Authorization in GitLab CWE-862 7.1 High 2026-08-12
CVE-2026-18433 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2026-08-12
CVE-2026-19228 Authorization Bypass Through User-Controlled Key in GitLab CWE-639 8.5 High 2026-08-12
CVE-2026-7427 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 5.3 Medium 2026-08-12
CVE-2026-8667 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2026-08-12
CVE-2026-15423 Incorrect Authorization in GitLab CWE-863 8.5 High 2026-08-12
CVE-2026-16627 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 7.7 High 2026-08-12
CVE-2026-18244 Missing Authorization in GitLab CWE-862 4.3 Medium 2026-08-12
CVE-2025-14562 Incorrect Authorization in GitLab CWE-863 3.1 Low 2026-07-29
CVE-2026-3093 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 4.7 Medium 2026-07-29
CVE-2026-4672 Missing Authorization in GitLab CWE-862 4.3 Medium 2026-07-29
CVE-2026-6267 Insertion of Sensitive Information Into Sent Data in GitLab CWE-201 8.5 High 2026-07-29
CVE-2026-6336 Incorrect Authorization in GitLab CWE-863 5.3 Medium 2026-07-29
CVE-2026-12436 Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab CWE-915 8.4 High 2026-07-29
CVE-2026-13113 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab CWE-367 6.5 Medium 2026-07-29
CVE-2026-14341 Missing Authorization in GitLab CWE-862 4.9 Medium 2026-07-29

All 1083 known CVE vulnerabilities affecting GitLab with full Chinese analysis, references, and POCs where available.