GitLab 代码问题漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. There are code-related vulnerabilities in versions of GitLab EE prior t...

PT-2026-7515

Name of the Vulnerable Software and Affected Versions GitLab EE versions 15.6 through 18.6.5 GitLab EE versions 18.7 through 18.7.3 GitLab EE versions 18.8 through 18.8.3 Description An authenticated user could potentially cause a Denial of Service by uploading a malicious file and repeatedly...

GitLab Enterprise Edition（EE）和GitLab Community Edition（CE） 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. There were security vulnerabilities in versions prior to 18.6.6 of GitLab...

GitLab Enterprise Edition（EE）和GitLab Community Edition（CE） 代码问题漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. There were code vulnerabilities in versions prior to 18.6.6 of GitLab...

GitLab 跨站脚本漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Versions of GitLab before 18.6.6, 18.7.4, and 18.8.4 contained a...

PT-2026-7523

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 10.8 through 18.6.6 GitLab CE/EE versions 18.7 through 18.7.4 GitLab CE/EE versions 18.8 through 18.8.4 Description GitLab CE/EE is susceptible to a denial-of-service condition. An unauthenticated user could potentially...

GitLab 访问控制错误漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Vulnerabilities existed in versions prior to GitLab CE/EE 18.6.6, 18.7....

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD continuous integration and delivery. There were security vulnerabilities in versions prior to GitLab EE...

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Prior to GitLab CE/EE 18.8.4, there was a security vulnerability. This...

CVE-2025-14594

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to view certain pipeline values by querying the API...

CVE-2026-1282

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated user to inject malicious content into project labels titles...

CVE-2025-14560

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized actions on behalf of another user by injecting malicious conten...

PT-2026-7516

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.7 through 18.7.3 GitLab CE/EE versions 18.8 through 18.8.3 Description An unauthenticated user could cause a denial of service through CPU exhaustion by submitting specially crafted markdown files. These files trigger...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: kyverno, crossplane, flux-kustomize-controller, trivy, gitea, kargo, nuclei, kubevela, pulumi-kubernetes-operator, timoni, argo-cd, xeol, snyk-cli, gitaly, pulumi-language-java, argo-workflows, flux-image-automation-controller, scorecard, trufflehog, witness, wolfict...

CVE-2026-25934 vulnerabilities

Vulnerabilities for packages: kyverno, crossplane, flux-kustomize-controller, trivy, gitea, kargo, nuclei, kubevela, pulumi-kubernetes-operator, timoni, argo-cd, xeol, snyk-cli, gitaly, pulumi-language-java, argo-workflows, flux-image-automation-controller, scorecard, trufflehog, witness, wolfict...

CVE-2026-25934 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller-fips, flux-fips, gitlab-rails-ce, tekton-pipelines, apko-fips, argo-cd, xeol, pulumi-language-java, flux-image-automation-controller, trufflehog, tfsec, syft-fips, nfpm, pulumi-language-dotnet, k9s, grafana, chainctl, argocd-image-updater,...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller-fips, flux-fips, gitlab-rails-ce, tekton-pipelines, apko-fips, argo-cd, xeol, pulumi-language-java, flux-image-automation-controller, trufflehog, tfsec, syft-fips, nfpm, pulumi-language-dotnet, k9s, grafana, chainctl, argocd-image-updater,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, aws-signer-notation-plugin, kyverno-notation-aws, kubernetes-event-exporter, pguser, amass, k8s-device-plugin, extism, ingress-nginx-controller, litestream, glab, portieris, libnvidia-container, step-ca, node-problem-detector, lazydocker,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, aws-signer-notation-plugin, kyverno-notation-aws, kubernetes-event-exporter, confluent-cp-docker-utils, pguser, render-template, amass, k8s-device-plugin, extism, ingress-nginx-controller, litestream, glab, portieris, libnvidia-container,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, aws-signer-notation-plugin, kyverno-notation-aws, kubernetes-event-exporter, pguser, amass, k8s-device-plugin, extism, ingress-nginx-controller, litestream, glab, portieris, libnvidia-container, step-ca, node-problem-detector, lazydocker,...