CVE-2020-7967

GitLab EE 8.0 through 12.7.2 has Insecure Permissions issue 1 of 2...

CVE-2020-7971

GitLab EE 11.0 and later through 12.7.2 allows XSS...

CVE-2023-4002

An issue has been discovered in GitLab EE affecting all versions starting from 14.1 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for EE-licensed users to link any security policy project by its ID to projects or group...

CVE-2023-4812

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by adding changes to a previously approved merge...

EUVD-2021-26286

Malware in sbrugna...

EUVD-2020-28889

Malware in sbrugna...

EUVD-2020-5609

Malware in sbrugna...

EUVD-2018-11270

Malware in sbrugna...

EUVD-2023-58902

Malicious code in bioql PyPI...

EUVD-2022-42736

Malicious code in bioql PyPI...

EUVD-2023-44066

Malicious code in bioql PyPI...

EUVD-2025-20988

Malicious code in bioql PyPI...

EUVD-2022-25204

Malicious code in bioql PyPI...

EUVD-2024-54693

Malicious code in bioql PyPI...

EUVD-2024-31893

Malicious code in bioql PyPI...

EUVD-2023-54734

Malicious code in bioql PyPI...

EUVD-2024-31718

Malicious code in bioql PyPI...

CVE-2025-4976

An issue has been discovered in GitLab EE affecting all versions from 17.0 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under certain circumstances, could have allowed an attacker to access internal notes in GitLab Duo responses...

CVE-2025-4976 Exposure of Sensitive Information Due to Incompatible Policies in GitLab

An issue has been discovered in GitLab EE affecting all versions from 17.0 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under certain circumstances, could have allowed an attacker to access internal notes in GitLab Duo responses...

PT-2025-30634 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 17.0 through 18.0.4 GitLab EE versions 18.1 through 18.1.2 GitLab EE versions 18.2 through 18.2.0 Description: An issue exists in GitLab EE that, under certain circumstances, could allow an attacker to access internal notes...