CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,047 CVEs published, 228 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,047
Show in the list
Critical, last 7 days
228
Show in the list
Healthcare-tagged, last 7 days
8
Show in the list
Known exploited (CISA KEV)
1,760
Show in the list

Showing CVEs that name the product gitlab:gitlab. Show all products

312 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2020-14155Medium 5.3libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
Assigned by mitre
Jun 14, 2020
CVE-2021-22205
Known exploited
Critical 10.0An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9.
Assigned by GitLab
Apr 23, 2021
CVE-2021-22175
Known exploited
Medium 6.8When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthen…
Assigned by GitLab
Jun 11, 2021
CVE-2021-39935
Known exploited
Medium 6.8An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2.
Assigned by GitLab
Dec 13, 2021
CVE-2023-4630Medium 5.0Missing Authorization in GitLab
Assigned by GitLab
Sep 11, 2023
CVE-2023-5831Low 3.7Insertion of Sensitive Information Into Sent Data in GitLab
Assigned by GitLab
Nov 6, 2023
CVE-2023-5963Low 3.1Allocation of Resources Without Limits or Throttling in GitLab
Assigned by GitLab
Nov 6, 2023
CVE-2023-4379High 8.1Incorrect Authorization in GitLab
Assigned by GitLab
Nov 9, 2023
CVE-2023-7028
Known exploited
Critical 10.0Weak Password Recovery Mechanism for Forgotten Password in GitLab
Assigned by GitLab
Jan 12, 2024
CVE-2024-1525Medium 5.3Authentication Bypass Using an Alternate Path or Channel in GitLab
Assigned by GitLab
Feb 21, 2024

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.