Skip to content

GitLab · no weakness in the record

No weakness recorded

201 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

check available
2
likely to be exploited
3

Every one of the 201 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. GitLab GraphQL API User EnumerationCVE-2021-4191GitLab · CVSS 5.3 · 80% likely
  2. GitLab CE/EE - Information DisclosureCVE-2022-0735GitLab · CVSS 10 · 13% likely
  3. The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute…CVE-2013-4490Gitlab · 42% likely
  4. An account takeover issue has been discovered in GitLab EE affecting all versions starting from 11.10 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions…CVE-2022-1680GitLab · CVSS 9.9 · 16% likely
  5. An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server.CVE-2021-22192GitLab · CVSS 9.9 · 13% likely
  6. An issue was discovered in the wiki API in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows for remote code executi…CVE-2018-18649Gitlab · 6.7% likely
  7. An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 3 of 6).…CVE-2019-6788Gitlab · 4.3% likely
  8. An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server.CVE-2021-22201GitLab · CVSS 9.6 · 3.1% likely
  9. An issue was discovered in GitLab Omnibus 7.4 through 12.2.1. An unsafe interaction with logrotate could result in a privilege escalationCVE-2019-15741Gitlab · 3.1% likely
  10. A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The profile activity page was not restricting the amount of results one could request, potenti…CVE-2020-13315GitLab · CVSS 3.7 · 2.1% likely
  11. An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Contr…CVE-2019-6960Gitlab · 2.1% likely
  12. A Denial Of Service vulnerability in the apollo_upload_server Ruby gem in GitLab CE/EE all versions starting from 11.9 before 14.0.9, all versions starting from 14.1 before 14.1.4…CVE-2021-39880GitLab · CVSS 6.5 · 2.1% likely
  13. A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolled resource consumption with a specially…CVE-2021-22217GitLab · CVSS 6.5 · 2.0% likely
  14. GitLab Community and Enterprise Edition 8.9 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 has Incorrect Access Control.CVE-2018-19359Gitlab · 1.9% likely
  15. A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a mal…CVE-2021-22213GitLab · CVSS 8.8 · 1.8% likely
  16. An issue was discovered in GitLab Enterprise Edition before 11.7.11, 11.8.x before 11.8.7, and 11.9.x before 11.9.7. It allows Information Disclosure.CVE-2019-11000Gitlab · 1.8% likely
  17. An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9. A specially crafted request could bypass Multipart protection and read files in certain sp…CVE-2020-13356GitLab · CVSS 8.2 · 1.8% likely
  18. An issue has been discovered in GitLab affecting all versions starting from 12.1. Incorrect headers in specific project page allows attacker to have a temporary read access to the…CVE-2021-22167GitLab · CVSS 5.3 · 1.8% likely
  19. An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 1 of 6).…CVE-2019-6782Gitlab · 1.8% likely
  20. An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13.12.6, and all versions starting from 14.0 before 14.0.2. I…CVE-2021-22228GitLab · CVSS 6.5 · 1.7% likely
  21. An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorr…CVE-2019-9732Gitlab · 1.7% likely
  22. An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions.CVE-2019-9485Gitlab · 1.7% likely
  23. An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Embedded images and media files in markdown could be pointed to an arbitrary server, which would…CVE-2019-15726Gitlab · 1.7% likely
  24. A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1. It was possible to make the gitlab-runner process crash by sending malformed queries, re…CVE-2020-13310GitLab · CVSS 6.5 · 1.7% likely
  25. An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 2 of 5).CVE-2019-9172Gitlab · 1.6% likely
  26. An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 1 of 5).CVE-2019-9218Gitlab · 1.6% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.