Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GitLab — Vulnerabilities & Security Advisories 1083

All 1083 CVE vulnerabilities found in GitLab, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting GitLab, organized by vendor, product, and Common Weakness Enumeration (CWE) classification tags. It collects a comprehensive history of disclosed issues, spanning the full period during which GitLab has been commercially available, including both open-source and self-managed enterprise editions. Readers can use this resource to track the vendor's published security advisories, understand the frequency and severity trends of specific weakness classes, and review the complete vulnerability timeline for the GitLab platform. The data presented helps security teams identify recurring patterns, such as memory corruption or authentication flaws, without requiring individual lookups of separate CVE records. By consolidating these records, the page provides a structured overview of the product’s security posture, facilitating risk assessment and comparative analysis against other systems.

Vendor: GitLab

CVE ID Title CVSS Severity Published
CVE-2026-14351 Exposure of Sensitive Information Through Metadata in GitLab CWE-1230 4.3 Medium 2026-07-29
CVE-2026-15077 Improper Neutralization of Input Used for LLM Prompting in GitLab CWE-1427 4.3 Medium 2026-07-29
CVE-2026-15831 Generation of Incorrect Security Tokens in GitLab CWE-1270 4.3 Medium 2026-07-29
CVE-2026-15975 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 7.5 High 2026-07-29
CVE-2026-16553 Insufficiently Protected Credentials in GitLab CWE-522 5.4 Medium 2026-07-29
CVE-2025-12506 Use of Incorrectly-Resolved Name or Reference in GitLab CWE-706 3.5 Low 2026-07-08
CVE-2026-6352 Incorrect Authorization in GitLab CWE-863 2.7 Low 2026-07-08
CVE-2026-6896 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2026-07-08
CVE-2026-7492 Missing Authorization in GitLab CWE-862 4.3 Medium 2026-07-08
CVE-2026-8472 Missing Authorization in GitLab CWE-862 4.3 Medium 2026-07-08
CVE-2026-11827 Insufficiently Protected Credentials in GitLab CWE-522 4.9 Medium 2026-07-08
CVE-2026-13320 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 7.3 High 2026-07-08
CVE-2026-10086 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2026-06-25
CVE-2026-0934 Incorrect Authorization in GitLab CWE-863 3.8 Low 2026-06-25
CVE-2026-1606 Improper Control of Generation of Code ('Code Injection') in GitLab CWE-94 4.3 Medium 2026-06-25
CVE-2026-2238 Missing Authorization in GitLab CWE-862 5.3 Medium 2026-06-25
CVE-2026-3176 Missing Authorization in GitLab CWE-862 3.1 Low 2026-06-25
CVE-2026-5309 Authorization Bypass Through User-Controlled Key in GitLab CWE-639 5.4 Medium 2026-06-25
CVE-2026-5796 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2026-06-25
CVE-2026-5952 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2026-06-25
CVE-2026-8330 Insertion of Sensitive Information into Log File in GitLab CWE-532 4.4 Medium 2026-06-25
CVE-2026-10712 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.0 High 2026-06-25
CVE-2026-11379 Incorrect Authorization in GitLab CWE-863 5.3 Medium 2026-06-25
CVE-2026-12053 Insertion of Sensitive Information into Log File in GitLab CWE-532 8.6 High 2026-06-25
CVE-2026-12635 Reliance on Reverse DNS Resolution for a Security-Critical Action in GitLab CWE-350 - - 2026-06-25
CVE-2026-1500 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-06-11
CVE-2026-3553 Incorrect Authorization in GitLab CWE-863 3.1 Low 2026-06-11
CVE-2026-6269 Incorrect Authorization in GitLab CWE-863 5.4 Medium 2026-06-11
CVE-2026-6277 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2026-06-11
CVE-2026-6976 Authorization Bypass Through User-Controlled Key in GitLab CWE-639 3.7 Low 2026-06-11

All 1083 known CVE vulnerabilities affecting GitLab with full Chinese analysis, references, and POCs where available.