Known vulnerabilities in GitLab Enterprise Edition
Vendor:
GitLab, Inc
Software:
GitLab Enterprise Edition
Software CPE:
cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Website:
https://about.gitlab.com/
Total vulnerabilities:
1052
Public exploits:
16
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
19.3.1
19.2.5
19.1.7
19.3.0
19.2.4
19.2.3
19.1.6
19.1.5
19.0.8
19.0.7
18.11.11
18.11.10
19.2.2
19.1.4
19.0.6
18.11.9
18.11.8
19.2.1
19.1.3
19.0.5
19.2.0
19.1.2
19.0.4
18.11.7
18.8.11
19.1.1
19.0.3
18.11.6
19.1.0
19.0.2
18.11.5
18.10.8
19.0.1
18.11.4
18.10.7
18.6.8
18.5.7
18.7.7
18.6.7
18.5.6
18.9.8
18.8.10
19.0.0
18.11.3
18.10.6
18.9.7
18.11.2
18.10.5
18.11.1
18.10.4
18.9.6
18.11.0
18.10.3
18.9.5
18.8.9
18.10.2
18.9.4
18.8.8
18.10.1
18.9.3
18.8.7
18.10.0
18.7.6
18.8.6
18.9.2
18.9.1
18.9.0
18.8.5
18.7.5
18.8.4
18.7.4
18.6.6
18.8.3
18.7.3
18.6.5
18.8.2
18.7.2
18.6.4
18.8.1
18.8.0
18.5.5
18.6.3
18.7.1
18.7.0
18.6.2
18.5.4
18.4.6
18.6.1
18.5.3
18.4.5
18.6.0
18.5.2
18.4.4
18.3.6
18.5.1
18.4.3
18.3.5
18.5.0
18.4.2
18.3.4
18.2.8
18.4.1
18.3.3
18.2.7
18.4.0
18.3.2
18.2.6
18.1.6
18.3.1
18.2.5
18.1.5
18.3.0
18.2.4
18.2.3
17.11.7
18.2.2
18.1.4
18.0.6
18.2.1
18.1.3
18.0.5
18.2.0
18.1.2
18.0.4
17.11.6
17.11.5
18.0.3
18.1.1
18.1.0
18.0.2
17.11.4
17.10.8
18.0.1
17.11.3
17.10.7
18.0.0
17.11.2
17.10.6
17.9.8
17.9.7
17.10.5
17.11.1
17.11.0
17.10.4
17.9.6
17.8.7
17.10.3
17.10.2
17.9.5
17.9.4
17.10.1
17.9.3
17.8.6
17.10.0
17.9.2
17.8.5
17.7.7
17.9.1
17.8.4
17.7.6
17.8.3
17.7.5
17.9.0
17.8.2
17.7.4
17.6.5
17.8.1
17.7.3
17.6.4
17.8.0
17.7.2
17.7.1
17.6.3
17.5.5
17.7.0
17.6.2
17.5.4
17.4.6
17.6.1
17.5.3
17.4.5
17.6.0
17.5.2
17.4.4
17.3.7
17.5.1
17.4.3
17.3.6
17.5.0
17.4.2
17.3.5
17.2.9
17.4.1
17.3.4
17.2.8
16.2.11
16.1.8
16.0.10
16.4.7
16.3.9
16.5.10
16.6.10
16.8.10
16.7.10
16.9.11
16.10.10
17.4.0
17.2.7
17.1.8
17.0.8
16.11.10
17.3.3
17.2.6
17.3.2
17.2.5
17.1.7
17.0.7
16.11.9
17.3.1
17.2.4
17.2.3
17.1.6
17.1.5
17.3.0
17.2.2
17.1.4
17.0.6
16.11.8
17.2.1
17.1.3
17.0.5
16.1.7
16.0.9
16.4.6
16.3.8
16.2.10
16.5.9
16.11.7
16.10.9
16.9.10
16.8.9
16.7.9
16.6.9
17.2.0
17.1.2
17.0.4
16.11.6
17.1.1
17.0.3
16.11.5
16.6.8
16.10.8
16.9.9
16.8.8
16.7.8
17.1.0
17.0.2
16.11.4
16.10.7
16.10.6
16.11.3
17.0.1
17.0.0
16.9.8
16.11.2
16.10.5
16.9.7
16.11.1
16.10.4
16.9.6
16.11.0
16.10.3
16.9.5
16.8.7
16.10.2
16.9.4
16.8.6
16.10.1
16.9.3
16.8.5
16.10.0
16.9.2
16.8.4
16.7.7
16.9.1
16.8.3
16.7.6
16.9.0
16.8.2
16.7.5
16.6.7
16.8.1
16.7.4
16.6.6
16.5.8
16.8.0
16.7.3
16.6.5
16.5.7
16.5.5
16.7.1
16.6.3
16.7.2
16.6.4
16.5.6
16.4.5
16.3.7
16.2.9
16.1.6
16.7.0
16.6.2
16.5.4
16.4.4
16.6.1
16.5.3
16.4.3
16.6.0
16.5.2
16.5.1
16.4.2
16.3.6
16.5.0
16.4.1
16.3.5
16.2.8
16.4.0
16.3.4
16.2.7
16.3.3
16.2.6
16.3.2
16.3.1
16.2.5
16.1.5
16.3.0
16.2.4
16.1.4
16.2.3
16.2.2
16.1.3
16.0.8
15.11.13
16.2.1
16.2.0
15.11.12
16.1.2
16.0.7
15.11.11
16.1.1
16.0.6
15.11.10
16.1.0
16.0.5
15.11.9
16.0.4
16.0.3
15.11.8
16.0.2
15.11.7
15.10.8
15.11.6
16.0.1
15.11.5
16.0.0
15.11.4
15.11.3
15.10.7
15.9.8
15.11.2
15.10.6
15.9.7
15.11.1
15.10.5
15.9.6
15.11.0
15.10.4
15.10.3
15.10.2
15.9.5
15.8.6
15.7.9
15.8.5
15.9.4
15.10.1
15.10.0
15.9.3
15.9.2
15.8.4
15.7.8
15.9.1
15.9.0
15.8.3
15.8.2
15.7.7
15.6.8
15.8.1
15.7.6
15.6.7
15.8.0
15.7.5
15.7.4
15.6.6
15.6.5
15.5.9
15.5.8
15.7.3
15.7.2
15.6.4
15.5.7
15.7.1
15.6.3
15.7.0
15.5.6
15.6.2
15.6.1
15.5.5
15.4.6
15.6.0
15.4.5
15.5.4
15.5.3
15.5.2
15.4.4
15.3.5
15.5.1
15.5.0
15.4.3
15.4.2
15.4.1
15.4.0
15.2.5
15.3.4
15.3.3
15.3.2
15.2.4
15.1.6
15.3.1
15.2.3
15.1.5
15.3.0
15.2.2
15.2.1
15.1.4
15.0.5
15.2.0
15.1.3
15.1.2
15.1.1
15.0.4
14.10.5
15.1.0
15.0.3
15.0.2
15.0.1
14.10.4
14.9.5
15.0.0
14.10.3
14.10.2
14.10.1
14.9.4
14.8.6
14.10.0
14.9.3
14.9.2
14.8.5
14.7.7
14.6.7
14.7.6
14.9.1
14.9.0
14.8.4
14.8.3
14.7.5
14.6.6
14.6.5
14.7.4
14.8.2
14.8.1
14.8.0
14.7.3
14.7.2
14.7.1
14.6.4
14.5.4
14.7.0
14.6.3
14.6.2
14.5.3
14.4.5
14.6.1
14.6.0
14.5.2
14.4.4
14.3.6
14.4.3
14.5.1
14.3.5
14.2.7
14.5.0
14.1.8
14.4.2
14.0.12
13.12.15
13.12.14
13.12.13
14.4.1
14.3.4
14.2.6
14.4.0
14.3.3
14.3.2
14.3.1
14.2.5
14.1.7
14.1.6
14.0.11
13.12.12
14.3.0
14.2.4
14.1.5
14.0.10
13.12.11
14.2.3
14.2.2
14.1.4
14.0.9
14.0.8
14.2.1
14.2.0
14.1.3
13.12.10
14.1.2
14.0.7
13.12.9
14.1.1
14.1.0
14.0.6
14.0.5
14.0.4
13.12.8
13.11.7
14.0.3
14.0.2
14.0.1
14.0.0
13.12.7
13.12.6
13.12.5
13.12.4
13.12.3
13.12.1
13.11.6
13.10.5
13.11.5
13.12.2
13.12.0
13.11.4
13.11.3
13.11.2
13.10.4
13.9.7
13.11.1
13.11.0
13.10.3
13.9.6
13.8.8
13.10.2
13.10.1
13.9.5
13.8.7
13.10.0
13.9.4
13.8.6
13.7.9
13.9.3
13.9.2
13.8.5
13.7.8
13.9.1
13.9.0
13.8.4
13.7.7
13.6.7
13.8.3
13.8.2
13.7.6
13.6.6
13.8.1
13.7.5
13.8.0
13.7.4
13.6.5
13.5.7
13.7.3
13.7.2
13.6.4
13.5.6
13.7.1
13.7.0
13.6.3
13.6.2
13.6.1
13.6.0
13.5.5
13.5.4
13.5.3
13.4.7
13.4.6
13.3.9
13.4.5
13.5.2
13.5.1
13.3.8
13.5.0
13.4.4
13.4.3
13.4.2
13.3.7
13.3.6
13.3.5
13.2.10
13.4.0
13.3.4
13.2.8
13.1.10
13.3.3
13.2.7
13.1.9
13.3.2
13.3.1
13.3.0
13.2.6
13.2.5
13.1.8
13.1.7
13.0.14
13.0.13
13.2.4
13.2.3
13.1.6
13.0.12
13.0.11
13.2.2
13.1.5
13.2.0
13.1.0
13.0.10
13.1.3
13.0.9
12.10.14
13.1.2
13.0.8
12.10.13
13.0.7
12.10.12
13.1.1
13.0.6
12.10.11
12.9.10
13.0.4
13.0.3
12.10.8
13.0.1
12.10.7
12.9.8
13.0.0
12.10.6
12.10.5
12.10.4
12.9.6
12.10.2
12.10.1
12.9.5
12.8.10
12.10.0
12.9.4
12.9.3
12.9.2
12.9.1
12.9.0
12.8.9
12.8.7
12.8.6
12.8.5
12.8.4
12.8.3
12.8.2
12.8.1
12.8.0
12.7.9
12.6.7
12.7.2
12.5.9
12.7.4
12.7.5
12.7.3
12.7.1
12.7.0
12.6.6
12.6.5
12.6.4
12.6.2
12.6.1
12.6.0
12.5.8
12.5.5
12.5.4
12.5.3
12.5.1
12.5.0
12.4.8
12.3.9
12.2.11
12.1.14
12.1.12
12.0.12
12.0.10
12.4.5
12.4.3
12.4.2
12.4.1
12.4.0
12.3.7
12.3.4
12.3.2
12.3.1
12.3.0
12.2.8
12.2.7
12.2.6
12.1.10
12.1.9
12.0.9
12.2.5
12.2.4
12.2.2
12.1.5
12.1.4
12.1.3
12.1.2
12.1.1
12.0.7
12.0.6
11.11.8
11.11.7
8.12.7
8.12.6
8.12.5
8.12.4
8.12.3
8.12.2
8.12.1
8.11.9
8.11.8
8.11.7
8.11.6
8.11.5
8.11.4
8.11.3
8.11.2
8.11.1
8.10.12
8.10.11
8.10.10
8.10.9
8.10.8
8.10.7
8.10.6
8.10.5
8.10.4
8.10.3
8.10.2
8.10.1
8.9.10
8.9.9
8.9.8
8.9.7
8.9.6
8.9.5
8.9.4
8.9.3
8.9.2
8.9.1
8.8.9
8.8.8
8.8.7
8.8.6
8.8.5
8.8.4
8.8.3
8.8.2
8.8.1
8.7.9
8.7.8
8.7.7
8.7.6
8.7.5
8.7.4
8.7.3
8.7.2
8.7.1
8.6.9
8.6.8
8.6.7
8.6.6
8.6.5
8.6.4
8.6.3
8.6.2
8.6.1
8.5.13
8.5.12
8.5.11
8.5.10
8.5.9
8.5.8
8.5.7
8.5.6
8.5.5
8.5.4
8.5.3
8.5.2
8.5.1
8.4.11
8.4.10
8.4.9
8.4.8
8.4.7
8.4.6
8.4.5
8.4.4
8.4.3
8.4.2
8.4.1
8.3.10
8.3.9
8.3.8
8.3.7
8.3.6
8.3.5
8.3.4
8.3.3
8.3.2
8.3.1
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.1.4
8.1.3
8.1.2
8.1.1
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
7.14.3
7.14.2
7.14.1
7.13.3
7.13.2
7.13.1
7.12.2
7.12.1
7.11.4
7.11.3
7.11.2
7.10.1
7.6.2
7.6.1
7.5.3
7.4.4
6.9.4
6.9.3
6.9.2
6.9.1
6.7.1
12.2.1
12.2.0
12.2.3
11.7.3
11.5.10
11.10.8
11.11.4
11.10.7
12.0.2
12.0.1
6.6.2
6.6.1
12.0.0
11.11.3
11.11.2
11.10.6
11.9.12
11.11.0
11.8.7
11.8.6
11.10.4
11.10.3
11.10.2
11.10.1
11.10.0
11.9.10
11.9.9
11.9.8
11.9.7
11.9.6
11.9.5
11.9.3
11.9.2
11.9.1
11.9.0
11.8.10
11.8.3
11.8.2
11.8.0
11.7.12
11.7.11
11.7.10
11.7.8
11.7.7
11.7.5
11.7.2
11.7.1
11.7.0
11.6.11
11.6.10
11.6.9
11.6.8
11.6.5
11.6.4
11.6.3
11.6.2
11.6.1
11.6.0
11.5.11
11.5.8
11.5.5
11.5.3
11.5.2
11.5.1
11.5.0
11.4.9
11.4.8
11.4.7
11.4.6
11.4.5
11.4.4
11.4.3
11.4.2
11.4.1
11.4.0
11.3.14
11.3.13
11.3.11
11.3.10
11.3.9
11.3.8
11.3.7
11.3.6
11.3.5
11.3.4
11.3.3
11.3.2
11.3.1
11.3.0
11.2.8
11.2.7
11.2.6
11.2.5
11.2.4
11.2.3
11.2.2
11.2.1
11.2.0
11.1.7
11.1.6
11.1.5
11.1.4
11.1.3
11.1.2
11.1.1
11.1.0
11.0.6
11.0.5
11.0.4
11.0.3
11.0.2
11.0.1
11.0.0
10.8.6
10.8.5
10.8.4
10.8.3
10.8.2
10.8.1
10.8.0
10.7.7
10.7.6
10.7.5
10.7.4
10.7.3
10.7.2
10.7.1
10.7.0
10.6.6
10.6.5
10.6.4
10.6.3
10.6.2
10.6.1
10.6.0
10.5.8
10.5.7
10.5.6
10.5.5
10.5.4
10.5.3
10.5.2
10.5.1
10.5.0
10.4.7
10.4.6
10.4.5
10.4.4
10.4.3
10.4.2
10.4.1
10.4.0
10.3.9
10.3.8
10.3.7
10.3.6
10.3.5
10.3.4
10.3.3
10.3.2
10.3.1
10.3.0
10.2.8
10.2.7
10.2.6
10.2.5
10.2.4
10.2.3
10.2.2
10.2.1
10.2.0
10.1.7
10.1.6
10.1.5
10.1.4
10.1.3
10.1.2
10.1.1
10.1.0
10.0.7
10.0.5
10.0.4
10.0.3
10.0.2
10.0.1
10.0.0
9.5.10
9.5.9
9.5.8
9.5.7
9.5.6
9.5.5
9.5.4
9.5.3
9.5.2
9.5.1
9.5.0
9.4.7
9.4.6
9.4.5
9.4.4
9.4.3
9.4.2
9.4.1
9.4.0
9.3.11
9.3.10
9.3.9
9.3.8
9.3.7
9.3.6
9.3.5
9.3.4
9.3.3
9.3.2
9.3.1
9.3.0
9.2.10
9.2.9
9.2.8
9.2.7
9.2.6
9.2.5
9.2.4
9.2.3
9.2.2
9.2.1
9.2.0
9.1.10
9.1.9
9.1.8
9.1.7
9.1.6
9.1.5
9.1.4
9.1.3
9.1.2
9.1.1
9.1.0
9.0.13
9.0.12
9.0.11
9.0.10
9.0.9
9.0.8
9.0.7
9.0.6
9.0.5
9.0.4
9.0.3
9.0.2
9.0.1
9.0.0
8.17.8
8.17.7
8.17.6
8.17.5
8.17.4
8.17.3
8.17.2
8.17.1
8.17.0
8.16.9
8.16.8
8.16.7
8.16.6
8.16.5
8.16.4
8.16.3
8.16.2
8.16.1
8.16.0
8.15.8
8.15.7
8.15.6
8.15.5
8.15.4
8.15.3
8.15.2
8.15.1
8.15.0
8.14.10
8.14.9
8.14.8
8.14.7
8.14.6
8.14.5
8.14.4
8.14.3
8.14.2
8.14.1
8.14.0
8.13.12
8.13.11
8.13.10
8.13.9
8.13.8
8.13.7
8.13.6
8.13.5
8.13.4
8.13.3
8.13.2
8.13.1
8.13.0
8.12.12
8.12.11
8.12.10
8.12.9
8.12.8
8.12.0
8.11.11
8.11.10
8.11.0
8.10.0
8.9.0
8.8.0
8.7.0
8.6.0
8.5.0
8.4.0
8.3.0
8.2.0
8.1.0
8.0.0
7.14.0
7.13.0
7.12.0
7.11.0
7.10.0
7.9.0
7.8.0
7.7.0
7.6.0
7.5.0
7.4.0
7.3.0
7.2.0
7.1.0
7.0.0
6.9.0
6.8.0
6.7.0
6.6.0
6.5.0
6.4.0
6.3.0
6.2.0
Vulnerabilities (1052)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU145887 - Improper Authorization CVE-2026-7487 |
CWE-285 | Medium | 19.1.7, 19.2.5, 19.3.1 | 27.08.2026 |
SB2026082725 |
||
| #VU145886 - Acceptance of Extraneous Untrusted Data With Trusted Data CVE-2026-15387 |
CWE-349 | Medium | 19.1.7, 19.2.5, 19.3.1 | 27.08.2026 |
SB2026082725 |
||
| #VU145885 - Authentication Bypass Using an Alternate Path or Channel CVE-2026-3035 |
CWE-288 | Low | 19.1.7, 19.2.5, 19.3.1 | 27.08.2026 |
SB2026082725 |
||
| #VU145883 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2025-10903 |
CWE-835 | Medium | 19.1.7, 19.2.5, 19.3.1 | 27.08.2026 |
SB2026082725 |
||
| #VU145875 - Allocation of Resources Without Limits or Throttling CVE-2026-77801 |
CWE-770 | Medium | 19.1.7, 19.2.5, 19.3.1 | 27.08.2026 |
SB2026082725 |
||
| #VU145874 - Inclusion of Functionality from Untrusted Control Sphere CVE-2026-18252 |
CWE-829 | Medium | 19.1.7, 19.2.5, 19.3.1 | 27.08.2026 |
SB2026082725 |
||
| #VU143916 - Cross-Site Request Forgery (CSRF) CVE-2026-19650 |
CWE-352 | Low | 18.11.11, 19.0.8, 19.1.6, 19.2.4 | 18.08.2026 |
SB2026081806 |
||
| #VU143915 - Improper Control of Generation of Code ('Code Injection') CVE-2026-19478 |
CWE-94 | High | 18.11.11, 19.0.8, 19.1.6, 19.2.4 | 18.08.2026 |
SB2026081806 |
||
| #VU142369 - Missing Authorization CVE-2026-6821 |
CWE-862 | Low | 19.0.6, 19.1.4, 19.2.2 | 13.08.2026 |
SB2026081370 |
||
| #VU142370 - Missing Authorization CVE-2026-4879 |
CWE-862 | Low | 19.0.6, 19.1.4, 19.2.2 | 13.08.2026 |
SB2026081370 |
||
| #VU142371 - Improper Authorization CVE-2026-8667 |
CWE-285 | Low | 19.0.6, 19.1.4, 19.2.2 | 13.08.2026 |
SB2026081370 |
||
| #VU142372 - Improper Authorization CVE-2026-18244 |
CWE-285 | Low | 19.0.6, 19.1.4, 19.2.2 | 13.08.2026 |
SB2026081370 |
||
| #VU142373 - Improper Authorization CVE-2026-18433 |
CWE-285 | Low | 19.1.4, 19.2.2 | 13.08.2026 |
SB2026081370 |
||
| #VU142362 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-15217 |
CWE-79 | Low | 19.0.6, 19.1.4, 19.2.2 | 13.08.2026 |
SB2026081370 |
||
| #VU142363 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-15216 |
CWE-79 | Low | 19.0.6, 19.1.4, 19.2.2 | 13.08.2026 |
SB2026081370 |
||
| #VU142364 - Improper Authorization CVE-2026-15423 |
CWE-285 | Medium | 19.0.6, 19.1.4, 19.2.2 | 13.08.2026 |
SB2026081370 |
||
| #VU142365 - Improper Authorization CVE-2026-19228 |
CWE-285 | Medium | 19.1.4, 19.2.2 | 13.08.2026 |
SB2026081370 |
||
| #VU142366 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-16627 |
CWE-79 | Low | 19.2.2 | 13.08.2026 |
SB2026081370 |
||
| #VU142367 - Missing Authorization CVE-2026-16494 |
CWE-862 | Low | 19.1.4, 19.2.2 | 13.08.2026 |
SB2026081370 |
||
| #VU142368 - Improper input validation CVE-2026-7427 |
CWE-20 | Medium | 19.0.6, 19.1.4, 19.2.2 | 13.08.2026 |
SB2026081370 |
Showing elements 1 - 20 out of 1052