Known vulnerabilities in GitLab

Vendor: Jenkins
Software: GitLab
Software CPE: cpe:2.3:a:jenkins:gitlab:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GitLab GitLab is affected by 6 known vulnerabilities: 2 medium, 4 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150968 - Insufficiently Protected Credentials
CVE-2026-92133
CWE-522 Medium
No
No
1.2152.veec0897048b_0 18.09.2026 SB20260918169
#VU147206 - Server-Side Request Forgery (SSRF)
CVE-2026-84664
CWE-918 Medium
No
No
1.9.182144.vc1c369226a_52 07.09.2026 SB2026090704
#VU103256 - Exposure of sensitive information to an unauthorized actor
CVE-2025-24397
CWE-200 Low
No
No
1.9.7 23.01.2025 SB2025012328
#VU68545 - Information Exposure Through Timing Discrepancy
CVE-2022-43411
CWE-208 Low
No
No
1.5.36 20.10.2022 SB2022102062
#VU64877 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34777
CWE-79 Low
No
No
1.5.35 04.07.2022 SB2022070407
#VU63380 - Permissions, Privileges, and Access Controls
CVE-2022-30955
CWE-264 Low
No
No
1.5.32 18.05.2022 SB2022051815