Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GitLab — Vulnerabilities & Security Advisories 1083

All 1083 CVE vulnerabilities found in GitLab, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting GitLab, organized by vendor, product, and Common Weakness Enumeration (CWE) classification tags. It collects a comprehensive history of disclosed issues, spanning the full period during which GitLab has been commercially available, including both open-source and self-managed enterprise editions. Readers can use this resource to track the vendor's published security advisories, understand the frequency and severity trends of specific weakness classes, and review the complete vulnerability timeline for the GitLab platform. The data presented helps security teams identify recurring patterns, such as memory corruption or authentication flaws, without requiring individual lookups of separate CVE records. By consolidating these records, the page provides a structured overview of the product’s security posture, facilitating risk assessment and comparative analysis against other systems.

Vendor: GitLab

CVE ID Title CVSS Severity Published
CVE-2025-6601 Business Logic Errors in GitLab CWE-840 2.7 Low 2025-10-27
CVE-2025-10497 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 7.5 High 2025-10-27
CVE-2025-11971 Incorrect Authorization in GitLab CWE-863 6.5 Medium 2025-10-27
CVE-2025-11974 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-10-27
CVE-2025-11447 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 7.5 High 2025-10-27
CVE-2025-11989 Missing Authorization in GitLab CWE-862 3.7 Low 2025-10-26
CVE-2025-10004 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 7.5 High 2025-10-09
CVE-2025-11340 Incorrect Authorization in GitLab CWE-863 7.7 High 2025-10-09
CVE-2025-2934 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 4.3 Medium 2025-10-09
CVE-2025-8014 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 7.5 High 2025-09-27
CVE-2025-11042 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 4.3 Medium 2025-09-26
CVE-2025-5069 Incorrect Ownership Assignment in GitLab CWE-708 3.5 Low 2025-09-26
CVE-2025-10868 Business Logic Errors in GitLab CWE-840 3.5 Low 2025-09-26
CVE-2025-7691 Privilege Defined With Unsafe Actions in GitLab CWE-267 6.5 Medium 2025-09-26
CVE-2025-9642 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2025-09-26
CVE-2025-9958 Insertion of Sensitive Information Into Sent Data in GitLab CWE-201 7.7 High 2025-09-26
CVE-2025-10858 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 7.5 High 2025-09-26
CVE-2025-10867 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 3.5 Low 2025-09-26
CVE-2025-10871 Missing Authorization in GitLab CWE-862 3.8 Low 2025-09-26
CVE-2025-1250 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-09-12
CVE-2025-2256 Improper Validation of Specified Quantity in Input in GitLab CWE-1284 7.5 High 2025-09-12
CVE-2025-6454 Server-Side Request Forgery (SSRF) in GitLab CWE-918 8.5 High 2025-09-12
CVE-2025-6769 Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab CWE-497 4.3 Medium 2025-09-12
CVE-2025-7337 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-09-12
CVE-2025-10094 Improper Validation of Specified Quantity in Input in GitLab CWE-1284 6.5 Medium 2025-09-12
CVE-2025-2246 Missing Authorization in GitLab CWE-862 5.8 Medium 2025-08-27
CVE-2025-3601 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-08-27
CVE-2025-4225 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 5.3 Medium 2025-08-27
CVE-2025-5101 Improper Control of Generation of Code ('Code Injection') in GitLab CWE-94 5.0 Medium 2025-08-27
CVE-2024-10219 Incorrect Authorization in GitLab CWE-863 6.5 Medium 2025-08-13

All 1083 known CVE vulnerabilities affecting GitLab with full Chinese analysis, references, and POCs where available.