GitLab

1 advisories tracked · GitLab (cve@gitlab.com CNA) via NVD · checked automatically every minute

Check if your GitLab device is affected

Pick your product and enter the exact software release it runs. We match it against the affected/fixed versions in GitLab's recent advisories.

Official source

GitLab (cve@gitlab.com CNA) via NVD

GitLab is its own CVE Numbering Authority and publishes prolifically — it ships coordinated security releases roughly every month, so VulniPulse ingests GitLab's CVEs from the NVD CNA feed (cve@gitlab.com), a high-volume, authoritative source where each record names the affected CE/EE version range. Covers GitLab Community Edition and Enterprise Edition (self-managed), plus GitLab Runner and Pages — self-hosted DevOps platforms that are a repeated RCE / auth-bypass target, so a patch-now audience.

Visit GitLab security advisories

Latest GitLab advisories

All severities critical high medium low

All platforms GitLab CE / EE GitLab Runner GitLab Pages

Critical9.0GitLab

GitLab: insecure direct object reference vulnerability in the Users API component of Crafty Controller allows a remote, authenticate…

An insecure direct object reference vulnerability in the Users API component of Crafty Controller allows a remote, authenticated attacker to perform user modification actions via improper API permissions validation.