CVE-2026-6336: Incorrect Authorization

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthorized user to view project import source information due to a missing authorization check...

PT-2026-65882

Name of the Vulnerable Software and Affected Versions GitLab EE versions 18.8 through 19.0.4 GitLab EE versions 19.1 through 19.1.2 GitLab EE versions 19.2 through 19.2.0 Description Improper handling of upstream requests in virtual registries could allow sensitive information to be disclosed to ...

CVE-2026-6267: Insertion of Sensitive Information Into Sent Data

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with Developer role to access unauthorized information due to insufficient access...

CVE-2026-13311 vulnerabilities

Vulnerabilities for packages: arangodb, code-server, gitlab-rails-ce, gitlab-rails-ce-fips, gemini-cli, argo-workflows...

GHSA-395F-4HP3-45GV vulnerabilities

Vulnerabilities for packages: arangodb, code-server, gitlab-rails-ce, gitlab-rails-ce-fips, gemini-cli, argo-workflows...

GHSA-H5PW-H3J7-CJ7F vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-PGGX-2V9R-J6GM vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-12506 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-13320 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-7492 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-M49F-RVV4-R4RV vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GitLab GraphQL API User Enumeration Detection

An unauthenticated remote attacker can leverage this vulnerability to collect registered GitLab usernames, names, and email addresses. !/usr/bin/env python3 -- coding: utf-8 -- """An unauthenticated remote attacker can leverage this vulnerability to collect registered GitLab usernames, nam.""" fr...

GitLab CE/EE - Hard-Coded Credentials Detection

GitLab CE/EE contains a hard-coded credentials vulnerability. A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SAML, allowing attackers to potentially take over accounts. This template attempts to passively identify vulnerable versions of GitLab...

GitLab CI YAML - Exposure Detection

The gitlab-ci.yml file, used for configuring CI/CD pipelines in GitLab, has been found exposed. This file contains crucial details about the build, test, and deployment processes, and may include sensitive information such as API keys, tokens, environment variables, and other credentials...

GitLab public signup Detection

Detects GitLab public signup. !/usr/bin/env python3 -- coding: utf-8 -- """Detects GitLab public signup.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GitLab public signup Detection', 'description': 'Detects GitLab...

Jenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting Detection

Jenkins Gitlab Hook 1.4.2 and earlier does not escape project names in the buildnow endpoint, resulting in a reflected cross-site scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Jenkins Gitlab Hook 1.""" from kittysploit import from lib.protocols.http.httpclient import...

Uninitialized GitLab instances Detection

Prior to version 14, GitLab installations required a root password to be set via the web UI. If the administrator skipped this step, any visitor could set a password and control the instance. !/usr/bin/env python3 -- coding: utf-8 -- """Prior to version 14, GitLab installations required a root...

Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure Detection

GitLab CE and EE 13.4 through 13.6.2 is susceptible to Information disclosure via GraphQL. User email is visible. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env python3 --...

SonarQube - Authentication Bypass Detection

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. !/usr/bin/env python3 -- coding: utf-8 -- """SonarQube 8.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

GitLab Instance Explore - Detect

This template checks for GitLab instances by verifying if /explore and /api/v4/projects endpoints are accessible with a 200 response. !/usr/bin/env python3 -- coding: utf-8 -- """This template checks for GitLab instances by verifying if /explore and /api/v4/projects endpoints are accessib.""" fro...