Known vulnerabilities in GitLab Enterprise Edition - page 9

Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 1105
Public exploits: 18
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition GitLab Enterprise Edition is affected by 1105 known vulnerabilities: 1 critical, 33 high, 495 medium, 576 low Critical High Medium Low

Vulnerabilities (1105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124599 - Cross-Site Request Forgery (CSRF)
CVE-2026-3857
CWE-352 Medium
No
No
18.8.7, 18.9.3, 18.10.1 25.03.2026 SB20260325205
#VU124600 - Improper Encoding or Escaping of Output
CVE-2026-2995
CWE-116 Low
No
No
18.8.7, 18.9.3, 18.10.1 25.03.2026 SB20260325205
#VU123966 - Improper Removal of Sensitive Information Before Storage or Transfer
CVE-2026-1182
CWE-212 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123965 - Improper Encoding or Escaping of Output
CVE-2025-12697
CWE-116 Low
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123964 - Missing Authorization
CVE-2025-12704
CWE-862 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123959 - Use of Incorrectly-Resolved Name or Reference
CVE-2026-1230
CWE-706 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123954 - Missing Authorization
CVE-2026-1663
CWE-862 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123952 - Improper Removal of Sensitive Information Before Storage or Transfer
CVE-2026-1732
CWE-212 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123951 - Improper Access Control
CVE-2026-0602
CWE-284 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123945 - Improper Access Control
CVE-2025-12555
CWE-284 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123944 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-3848
CWE-93 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123943 - Allocation of Resources Without Limits or Throttling
CVE-2025-12576
CWE-770 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123912 - Allocation of Resources Without Limits or Throttling
CVE-2025-13690
CWE-770 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123911 - Improper input validation
CVE-2025-14513
CWE-20 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123910 - Allocation of Resources Without Limits or Throttling
CVE-2025-13929
CWE-770 Medium
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123909 - Uncontrolled Recursion
CVE-2026-1069
CWE-674 Medium
No
No
18.9.2 12.03.2026 SB2026031246
#VU123908 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-1090
CWE-79 Low
No
No
18.7.6, 18.8.6, 18.9.2 12.03.2026 SB2026031246
#VU123282 - Allocation of Resources Without Limits or Throttling
CVE-2026-1662
CWE-770 Medium
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626
#VU123280 - Improper input validation
CVE-2025-14511
CWE-20 Medium
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626
#VU123279 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-0752
CWE-79 Low
No
No
18.7.5, 18.8.5, 18.9.1 26.02.2026 SB2026022626


Showing elements 161 - 180 out of 1105