Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GitLab — Vulnerabilities & Security Advisories 1083

All 1083 CVE vulnerabilities found in GitLab, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting GitLab, organized by vendor, product, and Common Weakness Enumeration (CWE) classification tags. It collects a comprehensive history of disclosed issues, spanning the full period during which GitLab has been commercially available, including both open-source and self-managed enterprise editions. Readers can use this resource to track the vendor's published security advisories, understand the frequency and severity trends of specific weakness classes, and review the complete vulnerability timeline for the GitLab platform. The data presented helps security teams identify recurring patterns, such as memory corruption or authentication flaws, without requiring individual lookups of separate CVE records. By consolidating these records, the page provides a structured overview of the product’s security posture, facilitating risk assessment and comparative analysis against other systems.

Vendor: GitLab

CVE ID Title CVSS Severity Published
CVE-2025-11246 Insufficient Granularity of Access Control in GitLab CWE-1220 5.4 Medium 2026-01-09
CVE-2025-13772 Missing Authorization in GitLab CWE-862 7.1 High 2026-01-09
CVE-2025-13761 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.0 High 2026-01-09
CVE-2025-13781 Missing Authorization in GitLab CWE-862 6.5 Medium 2026-01-09
CVE-2025-12029 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.0 High 2025-12-11
CVE-2025-12734 Improper Encoding or Escaping of Output in GitLab CWE-116 3.5 Low 2025-12-11
CVE-2025-4097 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-12-11
CVE-2025-8405 Improper Encoding or Escaping of Output in GitLab CWE-116 7.7 High 2025-12-11
CVE-2025-11247 Authorization Bypass Through User-Controlled Key in GitLab CWE-639 4.3 Medium 2025-12-11
CVE-2025-11984 Authentication Bypass Using an Alternate Path or Channel in GitLab CWE-288 6.8 Medium 2025-12-11
CVE-2025-12562 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 7.5 High 2025-12-11
CVE-2025-12716 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2025-12-11
CVE-2025-13978 Generation of Error Message Containing Sensitive Information in GitLab CWE-209 4.3 Medium 2025-12-11
CVE-2025-14157 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-12-11
CVE-2024-9183 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab CWE-367 7.7 High 2025-12-05
CVE-2025-6195 Direct Request ('Forced Browsing') in GitLab CWE-425 4.3 Medium 2025-11-26
CVE-2025-7449 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-11-26
CVE-2025-12571 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 7.5 High 2025-11-26
CVE-2025-12653 Authentication Bypass by Spoofing in GitLab CWE-290 6.5 Medium 2025-11-26
CVE-2025-13611 Insertion of Sensitive Information into Log File in GitLab CWE-532 2.0 Low 2025-11-26
CVE-2025-9825 Missing Authorization in GitLab CWE-862 5.0 Medium 2025-11-21
CVE-2025-12983 Memory Allocation with Excessive Size Value in GitLab CWE-789 3.5 Low 2025-11-15
CVE-2025-2615 Insertion of Sensitive Information Into Sent Data in GitLab CWE-201 4.3 Medium 2025-11-15
CVE-2025-6945 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab CWE-77 3.5 Low 2025-11-15
CVE-2025-6171 Missing Authorization in GitLab CWE-862 5.3 Medium 2025-11-15
CVE-2025-7000 Insertion of Sensitive Information Into Sent Data in GitLab CWE-201 4.3 Medium 2025-11-15
CVE-2025-7736 Incorrect Authorization in GitLab CWE-863 3.1 Low 2025-11-15
CVE-2025-11865 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2025-11-15
CVE-2025-11990 Improper Handling of URL Encoding (Hex Encoding) in GitLab CWE-177 3.1 Low 2025-11-15
CVE-2025-11702 Missing Authorization in GitLab CWE-862 8.5 High 2025-10-29

All 1083 known CVE vulnerabilities affecting GitLab with full Chinese analysis, references, and POCs where available.