Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GitLab — Vulnerabilities & Security Advisories 1083

All 1083 CVE vulnerabilities found in GitLab, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting GitLab, organized by vendor, product, and Common Weakness Enumeration (CWE) classification tags. It collects a comprehensive history of disclosed issues, spanning the full period during which GitLab has been commercially available, including both open-source and self-managed enterprise editions. Readers can use this resource to track the vendor's published security advisories, understand the frequency and severity trends of specific weakness classes, and review the complete vulnerability timeline for the GitLab platform. The data presented helps security teams identify recurring patterns, such as memory corruption or authentication flaws, without requiring individual lookups of separate CVE records. By consolidating these records, the page provides a structured overview of the product’s security posture, facilitating risk assessment and comparative analysis against other systems.

Vendor: GitLab

CVE ID Title CVSS Severity Published
CVE-2025-13078 Improper Validation of Specified Quantity in Input in GitLab CWE-1284 6.5 Medium 2026-03-25
CVE-2025-13436 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-03-25
CVE-2025-14595 Missing Authorization in GitLab CWE-862 4.3 Medium 2026-03-25
CVE-2026-1724 Missing Authentication for Critical Function in GitLab CWE-306 6.8 Medium 2026-03-25
CVE-2026-2745 Authentication Bypass Using an Alternate Path or Channel in GitLab CWE-288 6.8 Medium 2026-03-25
CVE-2026-2726 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2026-03-25
CVE-2026-2973 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 5.4 Medium 2026-03-25
CVE-2026-2995 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab CWE-80 7.7 High 2026-03-25
CVE-2026-3857 Cross-Site Request Forgery (CSRF) in GitLab CWE-352 8.1 High 2026-03-25
CVE-2026-3988 Inefficient Algorithmic Complexity in GitLab CWE-407 7.5 High 2026-03-25
CVE-2026-4363 Incorrect Authorization in GitLab CWE-863 3.7 Low 2026-03-25
CVE-2026-1182 Improper Removal of Sensitive Information Before Storage or Transfer in GitLab CWE-212 4.3 Medium 2026-03-12
CVE-2025-12555 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2026-03-11
CVE-2025-12576 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-03-11
CVE-2025-12697 Improper Encoding or Escaping of Output in GitLab CWE-116 2.2 Low 2026-03-11
CVE-2025-12704 Missing Authorization in GitLab CWE-862 3.5 Low 2026-03-11
CVE-2025-13690 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-03-11
CVE-2025-13929 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 7.5 High 2026-03-11
CVE-2025-14513 Improper Validation of Specified Quantity in Input in GitLab CWE-1284 7.5 High 2026-03-11
CVE-2026-0602 Authentication Bypass Using an Alternate Path or Channel in GitLab CWE-288 4.3 Medium 2026-03-11
CVE-2026-1069 Uncontrolled Recursion in GitLab CWE-674 7.5 High 2026-03-11
CVE-2026-1090 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2026-03-11
CVE-2026-1230 Use of Incorrectly-Resolved Name or Reference in GitLab CWE-706 4.1 Medium 2026-03-11
CVE-2026-1663 Missing Authorization in GitLab CWE-862 4.3 Medium 2026-03-11
CVE-2026-1732 Improper Removal of Sensitive Information Before Storage or Transfer in GitLab CWE-212 4.3 Medium 2026-03-11
CVE-2026-3848 Improper Neutralization of CRLF Sequences ('CRLF Injection') in GitLab CWE-93 5.0 Medium 2026-03-11
CVE-2025-14511 Improper Validation of Specified Quantity in Input in GitLab CWE-1284 7.5 High 2026-02-25
CVE-2026-0752 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.0 High 2026-02-25
CVE-2026-1388 Inefficient Regular Expression Complexity in GitLab CWE-1333 7.5 High 2026-02-25
CVE-2026-1662 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 7.5 High 2026-02-25

All 1083 known CVE vulnerabilities affecting GitLab with full Chinese analysis, references, and POCs where available.