CVE-2025-1908

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

CVE-2025-1763

An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

CVE-2024-2878

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible for an attacker to cause a denial of service by crafting unusual search terms for branch names...

CVE-2024-2279

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 to 16.8.6 all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. Using the autocomplete for issues references feature a crafted payload may lead to a stored XSS, allowin...

CVE-2024-12303 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-1477 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-2614 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-6186 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-4VC6-9M66-J82C vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-CXXF-6583-J227 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-H6QJ-3XRQ-VXH8 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-QFPG-MW2P-44HG vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-WXX2-2CV7-VHX6 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-VP64-6MXR-66QC vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-7734 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-2937 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-625H-95R8-8XPM vulnerabilities

Vulnerabilities for packages: ruby3.3-rack, ruby3.2-rack, ruby3.4-rack, gitlab-rails-ce, ruby4.0-rack...

CVE-2025-59830 vulnerabilities

Vulnerabilities for packages: ruby3.3-rack, ruby3.2-rack, ruby3.4-rack, gitlab-rails-ce, ruby4.0-rack...

PT-2026-1715

Name of the Vulnerable Software and Affected Versions GitLab EE versions 18.5 through 18.5.4 GitLab EE versions 18.6 through 18.6.2 GitLab EE versions 18.7 through 18.7.0 Description An authenticated user could modify instance-wide AI feature provider settings due to missing authorization checks ...

PT-2026-1692

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 8.3 through 18.5.4 GitLab CE/EE versions 18.6 through 18.6.2 GitLab CE/EE versions 18.7 through 18.7.0 Description An authenticated user could create a denial of service condition by providing crafted responses to externa...