Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GitLab — Vulnerabilities & Security Advisories 1083

All 1083 CVE vulnerabilities found in GitLab, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting GitLab, organized by vendor, product, and Common Weakness Enumeration (CWE) classification tags. It collects a comprehensive history of disclosed issues, spanning the full period during which GitLab has been commercially available, including both open-source and self-managed enterprise editions. Readers can use this resource to track the vendor's published security advisories, understand the frequency and severity trends of specific weakness classes, and review the complete vulnerability timeline for the GitLab platform. The data presented helps security teams identify recurring patterns, such as memory corruption or authentication flaws, without requiring individual lookups of separate CVE records. By consolidating these records, the page provides a structured overview of the product’s security posture, facilitating risk assessment and comparative analysis against other systems.

Vendor: GitLab

CVE ID Title CVSS Severity Published
CVE-2026-1747 Authentication Bypass Using an Alternate Path or Channel in GitLab CWE-288 4.3 Medium 2026-02-25
CVE-2026-1725 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 5.3 Medium 2026-02-25
CVE-2026-2845 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-02-25
CVE-2025-3525 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-02-25
CVE-2025-14103 Missing Authorization in GitLab CWE-862 4.3 Medium 2026-02-25
CVE-2025-7659 Origin Validation Error in GitLab CWE-346 8.0 High 2026-02-11
CVE-2025-8099 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 7.5 High 2026-02-11
CVE-2025-12073 Server-Side Request Forgery (SSRF) in GitLab CWE-918 4.3 Medium 2026-02-11
CVE-2025-12575 Server-Side Request Forgery (SSRF) in GitLab CWE-918 5.4 Medium 2026-02-11
CVE-2025-14560 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 7.3 High 2026-02-11
CVE-2025-14594 Authorization Bypass Through User-Controlled Key in GitLab CWE-639 3.5 Low 2026-02-11
CVE-2025-14592 Missing Authorization in GitLab CWE-862 3.7 Low 2026-02-11
CVE-2026-0595 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 7.3 High 2026-02-11
CVE-2026-0958 Interpretation Conflict in GitLab CWE-436 7.5 High 2026-02-11
CVE-2026-1080 Authorization Bypass Through User-Controlled Key in GitLab CWE-639 4.3 Medium 2026-02-11
CVE-2026-1094 Improper Validation of Unsafe Equivalence in Input in GitLab CWE-1289 4.6 Medium 2026-02-11
CVE-2026-1282 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab CWE-80 3.5 Low 2026-02-11
CVE-2026-1387 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-02-11
CVE-2026-1456 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-02-11
CVE-2026-1458 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-02-11
CVE-2026-1751 Missing Authorization in GitLab CWE-862 3.1 Low 2026-02-02
CVE-2025-13928 Incorrect Authorization in GitLab CWE-863 7.5 High 2026-01-22
CVE-2025-13927 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 7.5 High 2026-01-22
CVE-2026-0723 Unchecked Return Value in GitLab CWE-252 7.4 High 2026-01-22
CVE-2026-1102 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 5.3 Medium 2026-01-22
CVE-2025-13335 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab CWE-835 6.5 Medium 2026-01-22
CVE-2025-11224 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 7.7 High 2026-01-14
CVE-2025-3950 Exposure of Private Personal Information to an Unauthorized Actor in GitLab CWE-359 3.5 Low 2026-01-09
CVE-2025-9222 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2026-01-09
CVE-2025-10569 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2026-01-09

All 1083 known CVE vulnerabilities affecting GitLab with full Chinese analysis, references, and POCs where available.