Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GitLab — Vulnerabilities & Security Advisories 1083

All 1083 CVE vulnerabilities found in GitLab, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting GitLab, organized by vendor, product, and Common Weakness Enumeration (CWE) classification tags. It collects a comprehensive history of disclosed issues, spanning the full period during which GitLab has been commercially available, including both open-source and self-managed enterprise editions. Readers can use this resource to track the vendor's published security advisories, understand the frequency and severity trends of specific weakness classes, and review the complete vulnerability timeline for the GitLab platform. The data presented helps security teams identify recurring patterns, such as memory corruption or authentication flaws, without requiring individual lookups of separate CVE records. By consolidating these records, the page provides a structured overview of the product’s security posture, facilitating risk assessment and comparative analysis against other systems.

Vendor: GitLab

CVE ID Title CVSS Severity Published
CVE-2026-6335 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 5.4 Medium 2026-05-14
CVE-2026-6883 Missing Authorization in GitLab CWE-862 2.6 Low 2026-05-14
CVE-2026-7377 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2026-05-14
CVE-2026-7471 Server-Side Request Forgery (SSRF) in GitLab CWE-918 3.5 Low 2026-05-14
CVE-2026-7481 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2026-05-14
CVE-2026-8280 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-05-14
CVE-2026-8144 Missing Authorization in GitLab CWE-862 4.3 Medium 2026-05-14
CVE-2026-3254 Improper Restriction of Rendered UI Layers or Frames in GitLab CWE-1021 3.5 Low 2026-04-22
CVE-2026-4922 Cross-Site Request Forgery (CSRF) in GitLab CWE-352 8.1 High 2026-04-22
CVE-2025-0186 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-04-22
CVE-2025-3922 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-04-22
CVE-2025-6016 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-04-22
CVE-2025-9957 Incorrect Authorization in GitLab CWE-863 2.7 Low 2026-04-22
CVE-2026-1660 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-04-22
CVE-2026-5262 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.0 High 2026-04-22
CVE-2026-5377 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2026-04-22
CVE-2026-5816 Improper Resolution of Path Equivalence in GitLab CWE-41 8.0 High 2026-04-22
CVE-2026-6515 Insufficient Session Expiration in GitLab CWE-613 5.4 Medium 2026-04-22
CVE-2025-9484 Missing Authorization in GitLab CWE-862 4.3 Medium 2026-04-08
CVE-2025-12664 Improper Validation of Specified Quantity in Input in GitLab CWE-1284 7.5 High 2026-04-08
CVE-2026-1092 Improper Validation of Specified Quantity in Input in GitLab CWE-1284 7.5 High 2026-04-08
CVE-2026-1101 Improper Validation of Specified Quantity in Input in GitLab CWE-1284 6.5 Medium 2026-04-08
CVE-2026-1516 Improper Control of Generation of Code ('Code Injection') in GitLab CWE-94 5.7 Medium 2026-04-08
CVE-2026-1752 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2026-04-08
CVE-2026-2104 Authorization Bypass Through User-Controlled Key in GitLab CWE-639 4.3 Medium 2026-04-08
CVE-2026-2619 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2026-04-08
CVE-2026-4332 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 5.4 Medium 2026-04-08
CVE-2026-4916 Missing Authorization in GitLab CWE-862 2.7 Low 2026-04-08
CVE-2026-5173 Exposed Dangerous Method or Function in GitLab CWE-749 8.5 High 2026-04-08
CVE-2026-2370 Improper Handling of Parameters in GitLab CWE-233 8.1 High 2026-03-29

All 1083 known CVE vulnerabilities affecting GitLab with full Chinese analysis, references, and POCs where available.