Known vulnerabilities in GitLab Enterprise Edition - page 8

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1052
Public exploits: 16
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1052 known vulnerabilities: 1 critical, 31 high, 481 medium, 539 low Critical High Medium Low

Vulnerabilities (1052)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123966 - Improper Removal of Sensitive Information Before Storage or Transfer
CVE-2026-1182
CWE-212 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123965 - Improper Encoding or Escaping of Output
CVE-2025-12697
CWE-116 Low
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123943 - Allocation of Resources Without Limits or Throttling
CVE-2025-12576
CWE-770 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123912 - Allocation of Resources Without Limits or Throttling
CVE-2025-13690
CWE-770 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123911 - Improper input validation
CVE-2025-14513
CWE-20 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123910 - Allocation of Resources Without Limits or Throttling
CVE-2025-13929
CWE-770 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123909 - Uncontrolled Recursion
CVE-2026-1069
CWE-674 Medium
No
No
18.9.2 12.03.2026 SB2026031246
#VU123908 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-1090
CWE-79 Low
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123296 - Improper Access Control
CVE-2025-14103
CWE-284 Medium
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626
#VU123295 - Improper Access Control
CVE-2026-1747
CWE-284 Medium
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626
#VU123293 - Allocation of Resources Without Limits or Throttling
CVE-2026-1725
CWE-770 Medium
No
No
18.9.1 26.02.2026 SB2026022626
#VU123292 - Allocation of Resources Without Limits or Throttling
CVE-2025-3525
CWE-770 Medium
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626
#VU123289 - Allocation of Resources Without Limits or Throttling
CVE-2026-2845
CWE-770 Medium
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626
#VU123286 - Incorrect Regular Expression
CVE-2026-1388
CWE-185 Medium
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626
#VU123282 - Allocation of Resources Without Limits or Throttling
CVE-2026-1662
CWE-770 Medium
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626
#VU123280 - Improper input validation
CVE-2025-14511
CWE-20 Medium
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626
#VU123279 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-0752
CWE-79 Low
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626
#VU122643 - Improper input validation
CVE-2026-0958
CWE-20 Medium
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125
#VU122642 - Improper input validation
CVE-2025-8099
CWE-20 Medium
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125
#VU122641 - Improper input validation
CVE-2025-7659
CWE-20 High
No
No
18.6.6, 18.7.4, 18.8.4 11.02.2026 SB2026021125


Showing elements 141 - 160 out of 1052