GitLab Reverse DNS Unauthorized Access

The vulnerability of the software interface of the CI/CD subsystem of the Git-based software platform for collaborative code development on GitLab EE/CE is related to the dependence of critical operations on the reverse DNS solution. Exploiting this vulnerability can allow a malicious actor to ga...

Maven Package Registry Bypass

The vulnerability of the Maven package registry on the Git-based software development platform, used for collaborative code development on GitLab EE/CE, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass existing securit...

CVE-2026-8330

GitLab CE/EE versions affected: all 9.3–<18.11.6, 19.0–<19.0.3, and 19.1–

AI Workflow Runner Authorization Compromise

The vulnerability of the authorization mechanism for performers of artificial intelligence AI workflow runners on a Git-based software platform for collaborative code development on GitLab relates to bypassing authorization by using a user-controlled key. Exploiting this vulnerability could allow...

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Vulnerabilities exist in versions of GitLab CE/EE before 18.10.7,...

GitLab Authentication Bypass

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to bypassing authentication by using a key controlled by the user. Exploiting this vulnerability allows an attacker to remotely compromise the integrity of the protected information...

GitLab Code Execution

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2026-3988

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to cause a denial of service by making the GitLab instance unresponsive due to improper input validation in...

GitLab Regular Expression DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

GitLab DoS

The vulnerability of the application software interface of a Git-based software platform for collaborative code development on GitLab is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability can allow a malicious actor to cause service...

GitLab GraphQL Query Execution Environment Data Compromise

The vulnerability of the GraphQL query execution environment of a Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity and...

GitLab Commits API DoS

The vulnerability of the Commits API interface of the Git-based software development platform for collaborative code editing on GitLab is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

GitLab GraphQL API Interface DoS

The vulnerability of the GraphQL API interface of a software platform based on Git for collaborative code development on GitLab is related to unlimited resource distribution. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and cause service failures by sendi...

GraphQL API Interface GitLab Access Bypass

The vulnerability of the GraphQL API interface of the Git-based software development platform for collaborative code editing on GitLab is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker to gain read, edit, or delete access to data...

GitLab Ruby Core DoS

The vulnerability of the Ruby Core library, a software platform based on Git for collaborative code development on GitLab, is related to unlimited resource distribution. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

GitLab Uncontrolled Memory Distribution DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

GitLab GraphQL API Unauthorized Access

The vulnerability of the GraphQL API interface of a software platform based on Git for collaborative code development on GitLab is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized acces...

GitLab Information Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to clean up data at the management level. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...

GitLab OAuth Protocol Unauthorized Access

The vulnerability of the OAuth protocol implementation in a software platform based on Git for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass security restrictions and gain...

GitLab Unlimited Resource Distribution DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...