Lucene search
+L

2615 matches found

CVE
CVE
added 2026/05/14 5:38 a.m.84 views

CVE-2025-13874

CVE-2025-13874 affects GitLab CE/EE campaigns: all versions from 15.1 prior to 18.9.7, 18.10 prior to 18.10.6, and 18.11 prior to 18.11.3 could allow an authenticated user with Guest permissions to view issues in projects they were not authorized to access. The issue is described as an Authorizat...

4.3CVSS5.8AI score0.00227EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/05/14 5:36 a.m.6 views

CVE-2026-1338 Authorization Bypass Through User-Controlled Key in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with developer-role permissions to delete protected container registry tags due to improper authorization...

4.3CVSS5.5AI score
SaveExploits0References6
OSV
OSV
added 2026/05/14 5:33 a.m.5 views

CVE-2026-6335 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.3 that under certain conditions could have allowed an authenticated user to execute arbitrary code in another user's browser session due to improper sanitization...

5.4CVSS6.1AI score
SaveExploits0References6
OSV
OSV
added 2026/05/14 5:33 a.m.3 views

CVE-2026-8280 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to cause denial of service through excessive memory consumption due to improper input validation...

6.5CVSS5.5AI score
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.14 views

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Vulnerabilities exist in versions of GitLab CE/EE 17.6 to 18.9.7, 18.10...

4.3CVSS5.9AI score0.00263EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.15 views

GitLab Enterprise Edition(EE)和GitLab Community Edition(CE) 跨站脚本漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. Versions of GitLab CE/EE prior to 18.11.3 contained a cross-site...

5.4CVSS6.1AI score0.00192EPSS
SaveExploits0References2
Chainguard
Chainguard
added 2026/05/10 7:17 a.m.15 views

GHSA-526F-JXPJ-JMG2 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

5.2AI score
SaveExploits0
Chainguard
Chainguard
added 2026/05/10 7:17 a.m.28 views

CVE-2026-43870 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

7.3CVSS5AI score0.00394EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/05/10 1:17 a.m.19 views

CVE-2026-44836 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

6.5CVSS5AI score0.00343EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/05/10 1:17 a.m.12 views

GHSA-HG3H-G7XC-F7VP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

5.2AI score
SaveExploits0
Chainguard
Chainguard
added 2026/05/10 1:17 a.m.25 views

CVE-2026-44837 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

7.5CVSS5AI score0.00412EPSS
SaveExploits1
Chainguard
Chainguard
added 2026/05/09 1:17 p.m.26 views

CVE-2026-40295 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

6.1CVSS5AI score0.00241EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/05/08 1:17 p.m.10 views

GHSA-FF6C-W6QF-7XQC vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

5.8AI score
SaveExploits0
Chainguard
Chainguard
added 2026/05/08 1:17 p.m.14 views

CVE-2026-44312 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

5.8AI score0.00146EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/05/08 7:18 a.m.14 views

GHSA-R67J-R569-JRWP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

5.8AI score
SaveExploits0
Chainguard
Chainguard
added 2026/05/08 7:18 a.m.20 views

CVE-2026-41636 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

8.7CVSS5.8AI score0.00451EPSS
SaveExploits0
NVD
NVD
added 2026/05/06 10:16 a.m.45 views

CVE-2026-43101

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix potential NULL dereferences in ioam6filltracedata We need to check in6devget for possible NULL value, as suggested by Yiming Qian. Also add skbdstdevrcu instead of skbdstdev, and two missing READONCE. Note that @d...

7.5CVSS0.00426EPSS
SaveExploits0References3
Chainguard
Chainguard
added 2026/05/06 1:17 a.m.28 views

GHSA-Q2MW-FVJ9-VVCW vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-fluentd-operator, logstash-fips, ruby4.0-rails, ruby3.4-rails, truffleruby, ruby4.0-net-imap, ruby3.2-rails, ruby3.2-net-imap, jruby, kube-logging-operator, ruby3.3-net-imap, ruby3.3-rails, gitlab-rails-ce-fips, ruby3.4-net-imap, logstash...

5.2AI score
SaveExploits0
Chainguard
Chainguard
added 2026/05/06 1:17 a.m.27 views

GHSA-HM49-WCQC-G2XG vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-fluentd-operator, logstash-fips, ruby4.0-rails, ruby3.4-rails, truffleruby, ruby4.0-net-imap, ruby3.2-rails, ruby3.2-net-imap, jruby, kube-logging-operator, ruby3.3-net-imap, ruby3.3-rails, gitlab-rails-ce-fips, ruby3.4-net-imap, logstash...

5.2AI score
SaveExploits0
Chainguard
Chainguard
added 2026/05/06 1:17 a.m.12 views

GHSA-VCGP-9326-PQCP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-fluentd-operator, logstash-fips, ruby4.0-rails, ruby3.4-rails, truffleruby, ruby4.0-net-imap, ruby3.2-rails, ruby3.2-net-imap, jruby, kube-logging-operator, ruby3.3-net-imap, ruby3.3-rails, gitlab-rails-ce-fips, ruby3.4-net-imap, logstash...

5.2AI score
SaveExploits0
Rows per page
Query Builder