GitLab Security Vulnerabilities | CyStack CVE Database

Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

GitLab Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-85706`Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab	Exploitation statusKEV	FixYes	Affected productGitLab	Published09/12/2026	SeverityCritical
`CVE-2026-87719`Deserialization of Untrusted Data in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published09/12/2026	SeverityCritical
`CVE-2026-4398`Authorization Bypass Through User-Controlled Key in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/27/2026	SeverityMedium
`CVE-2026-75871`Server-Side Request Forgery (SSRF) in GitLab AI Gateway	Exploitation statusPublic exploit	FixYes	Affected productGitLab AI Gateway	Published08/27/2026	SeverityHigh
`CVE-2026-19889`Server-Side Request Forgery (SSRF) in GitLab AI Gateway	Exploitation statusPublic exploit	FixYes	Affected productGitLab AI Gateway	Published08/27/2026	SeverityHigh
`CVE-2025-10903`Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/26/2026	SeverityMedium
`CVE-2026-3035`Authentication Bypass Using an Alternate Path or Channel in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/26/2026	SeverityMedium
`CVE-2026-7487`Access Control Check Implemented After Asset is Accessed in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/26/2026	SeverityLow
`CVE-2026-15387`Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/26/2026	SeverityMedium
`CVE-2026-18252`Inclusion of Functionality from Untrusted Control Sphere in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/26/2026	SeverityHigh
`CVE-2026-77801`Allocation of Resources Without Limits or Throttling in GitLab	Exploitation statusNot known exploited	FixYes	Affected productGitLab	Published08/26/2026	SeverityMedium
`CVE-2026-10053`Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/23/2026	SeverityHigh
`CVE-2026-19650`Cross-Site Request Forgery (CSRF) in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/17/2026	SeverityHigh
`CVE-2026-19478`Improper Control of Generation of Code ('Code Injection') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/17/2026	SeverityCritical
`CVE-2025-9486`Incorrect Privilege Assignment in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/12/2026	SeverityLow
`CVE-2026-4879`Missing Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/12/2026	SeverityMedium
`CVE-2026-6821`Missing Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/12/2026	SeverityMedium
`CVE-2026-15217`Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/12/2026	SeverityHigh
`CVE-2026-15216`Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/12/2026	SeverityHigh
`CVE-2026-16494`Missing Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/12/2026	SeverityHigh
`CVE-2026-18433`Incorrect Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/12/2026	SeverityMedium
`CVE-2026-19228`Authorization Bypass Through User-Controlled Key in GitLab	Exploitation statusNot known exploited	FixYes	Affected productGitLab	Published08/12/2026	SeverityHigh
`CVE-2026-7427`Allocation of Resources Without Limits or Throttling in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/12/2026	SeverityMedium
`CVE-2026-8667`Incorrect Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/12/2026	SeverityMedium
`CVE-2026-15423`Incorrect Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/12/2026	SeverityHigh
`CVE-2026-16627`Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published08/12/2026	SeverityHigh
`CVE-2026-18244`Missing Authorization in GitLab	Exploitation statusNot known exploited	FixYes	Affected productGitLab	Published08/12/2026	SeverityMedium
`CVE-2025-14562`Incorrect Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published07/29/2026	SeverityLow
`CVE-2026-3093`Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published07/29/2026	SeverityMedium
`CVE-2026-4672`Missing Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published07/29/2026	SeverityMedium
`CVE-2026-6267`Insertion of Sensitive Information Into Sent Data in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published07/29/2026	SeverityHigh
`CVE-2026-6336`Incorrect Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published07/29/2026	SeverityMedium
`CVE-2026-12436`Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published07/29/2026	SeverityHigh
`CVE-2026-13113`Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab	Exploitation statusNot known exploited	FixYes	Affected productGitLab	Published07/29/2026	SeverityMedium
`CVE-2026-14341`Missing Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published07/29/2026	SeverityMedium
`CVE-2026-14351`Exposure of Sensitive Information Through Metadata in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published07/29/2026	SeverityMedium
`CVE-2026-15077`Improper Neutralization of Input Used for LLM Prompting in GitLab	Exploitation statusNot known exploited	FixYes	Affected productGitLab	Published07/29/2026	SeverityMedium
`CVE-2026-15831`Generation of Incorrect Security Tokens in GitLab	Exploitation statusNot known exploited	FixYes	Affected productGitLab	Published07/29/2026	SeverityMedium
`CVE-2026-15975`Allocation of Resources Without Limits or Throttling in GitLab	Exploitation statusNot known exploited	FixYes	Affected productGitLab	Published07/29/2026	SeverityHigh
`CVE-2026-16553`Insufficiently Protected Credentials in GitLab	Exploitation statusNot known exploited	FixYes	Affected productGitLab	Published07/29/2026	SeverityMedium
`CVE-2025-12506`Use of Incorrectly-Resolved Name or Reference in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published07/08/2026	SeverityLow
`CVE-2026-6352`Incorrect Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published07/08/2026	SeverityLow
`CVE-2026-6896`Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published07/08/2026	SeverityHigh
`CVE-2026-7492`Missing Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published07/08/2026	SeverityMedium
`CVE-2026-8472`Missing Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published07/08/2026	SeverityMedium
`CVE-2026-11827`Insufficiently Protected Credentials in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published07/08/2026	SeverityMedium
`CVE-2026-13151`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published07/08/2026	SeverityUnknown
`CVE-2026-13320`Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published07/08/2026	SeverityHigh
`CVE-2026-10086`Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/25/2026	SeverityHigh
`CVE-2026-0934`Incorrect Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/25/2026	SeverityLow
`CVE-2026-1606`Improper Control of Generation of Code ('Code Injection') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/25/2026	SeverityMedium
`CVE-2026-2238`Missing Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/25/2026	SeverityMedium
`CVE-2026-3176`Missing Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/25/2026	SeverityLow
`CVE-2026-5309`Authorization Bypass Through User-Controlled Key in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/25/2026	SeverityMedium
`CVE-2026-5796`Incorrect Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/25/2026	SeverityMedium
`CVE-2026-5952`Incorrect Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/25/2026	SeverityMedium
`CVE-2026-8330`Insertion of Sensitive Information into Log File in GitLab	Exploitation statusNot known exploited	FixYes	Affected productGitLab	Published06/25/2026	SeverityMedium
`CVE-2026-10712`Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/25/2026	SeverityHigh
`CVE-2026-11379`Incorrect Authorization in GitLab	Exploitation statusNot known exploited	FixYes	Affected productGitLab	Published06/25/2026	SeverityMedium
`CVE-2026-12053`Insertion of Sensitive Information into Log File in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/25/2026	SeverityHigh
`CVE-2026-12635`Reliance on Reverse DNS Resolution for a Security-Critical Action in GitLab	Exploitation statusNot known exploited	FixYes	Affected productGitLab	Published06/25/2026	SeverityInformational
`CVE-2026-1500`Allocation of Resources Without Limits or Throttling in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/11/2026	SeverityMedium
`CVE-2026-3553`Incorrect Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/11/2026	SeverityLow
`CVE-2026-6269`Incorrect Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/11/2026	SeverityMedium
`CVE-2026-6277`Incorrect Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/11/2026	SeverityMedium
`CVE-2026-6552`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published06/11/2026	SeverityUnknown
`CVE-2026-6976`Authorization Bypass Through User-Controlled Key in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/11/2026	SeverityLow
`CVE-2026-7250`Allocation of Resources Without Limits or Throttling in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/11/2026	SeverityHigh
`CVE-2026-8589`Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/11/2026	SeverityHigh
`CVE-2026-9204`Server-Side Request Forgery (SSRF) in GitLab	Exploitation statusNot known exploited	FixYes	Affected productGitLab	Published06/11/2026	SeverityMedium
`CVE-2026-9694`Improper Neutralization of Substitution Characters in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/11/2026	SeverityLow
`CVE-2026-10087`Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published06/11/2026	SeverityHigh
`CVE-2026-10733`Improper Restriction of Rendered UI Layers or Frames in GitLab	Exploitation statusNot known exploited	FixYes	Affected productGitLab	Published06/11/2026	SeverityMedium
`CVE-2026-9807`Incorrect Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/28/2026	SeverityMedium
`CVE-2026-1402`Allocation of Resources Without Limits or Throttling in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/27/2026	SeverityMedium
`CVE-2026-2601`Missing Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/27/2026	SeverityMedium
`CVE-2026-4868`Authorization Bypass Through User-Controlled Key in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/27/2026	SeverityHigh
`CVE-2026-5296`Missing Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/27/2026	SeverityMedium
`CVE-2026-6713`Incorrect Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/27/2026	SeverityMedium
`CVE-2026-8716`Use of Incorrectly-Resolved Name or Reference in GitLab	Exploitation statusNot known exploited	FixYes	Affected productGitLab	Published05/27/2026	SeverityMedium
`CVE-2025-12669`Improper Control of Generation of Code ('Code Injection') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityMedium
`CVE-2025-13874`Authorization Bypass Through User-Controlled Key in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityMedium
`CVE-2025-14869`Improper Validation of Specified Quantity in Input in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityHigh
`CVE-2025-14870`Allocation of Resources Without Limits or Throttling in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityHigh
`CVE-2026-1184`Deserialization of Untrusted Data in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityMedium
`CVE-2026-1322`Business Logic Errors in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityMedium
`CVE-2026-1338`Authorization Bypass Through User-Controlled Key in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityMedium
`CVE-2026-1659`Allocation of Resources Without Limits or Throttling in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityHigh
`CVE-2026-2900`Missing Authorization in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityLow
`CVE-2026-3073`Authorization Bypass Through User-Controlled Key in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityMedium
`CVE-2026-3074`Authorization Bypass Through User-Controlled Key in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityMedium
`CVE-2026-3160`Unintended Proxy or Intermediary ('Confused Deputy') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityMedium
`CVE-2026-3607`Access Control Check Implemented After Asset is Accessed in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityMedium
`CVE-2026-4524`Authentication Bypass Using an Alternate Path or Channel in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityMedium
`CVE-2026-4527`Cross-Site Request Forgery (CSRF) in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityMedium
`CVE-2026-6063`Authorization Bypass Through User-Controlled Key in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityMedium
`CVE-2026-6073`Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityHigh
`CVE-2026-6335`Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityMedium
`CVE-2026-6883`Missing Authorization in GitLab	Exploitation statusNot known exploited	FixYes	Affected productGitLab	Published05/14/2026	SeverityLow
`CVE-2026-7377`Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab	Exploitation statusPublic exploit	FixYes	Affected productGitLab	Published05/14/2026	SeverityHigh

100 / 1,463 Results

Security vulnerabilities from GitLab

GitLab

How many security vulnerabilities does GitLab have?

Which GitLab product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular GitLab products

GitLab

GitLab AI Gateway