Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check if you run itEPSS 0.30%Jun 12, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check this weekEPSS 43.00%Jun 12, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 8.7 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2.Check this weekEPSS 43.00%Jun 12, 2025
- High8.7An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2.Check if you run itEPSS 0.31%Jun 12, 2025
- High8.7An issue has been discovered in GitLab CE/EE affecting all versions starting with 18.0 before 18.0.2.Check this weekEPSS 10.88%Jun 12, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 2.1.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2.Check if you run itEPSS 0.78%Jun 12, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryJun 8, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryJun 8, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryJun 8, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryJun 8, 2025
- UnknownJenkins gitlab_hook Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 92.79%Jun 7, 2025
- High8.7An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting alCheck this weekEPSS 56.00%May 30, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check this weekEPSS 51.00%May 23, 2025
- Low3.5A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3 and 18.0 prior to 18.0.1 where an attacker can cause a braCheck this weekEPSS 40.00%May 23, 2025
- None0.0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 0.00%May 23, 2025
- None0.0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 0.00%May 23, 2025
- Medium6.8An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check this weekEPSS 47.00%May 22, 2025
- Medium4.6An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check this weekEPSS 30.00%May 22, 2025
- Medium4.3An issue has been discovered in GitLab CE/EE affecting all versions from 17.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check this weekEPSS 33.00%May 22, 2025
- High7.5An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check this weekEPSS 51.00%May 22, 2025
- Low2.7An issue has been discovered in GitLab CE/EE affecting all versions from 18.0 before 18.0.1.Check this weekEPSS 32.00%May 22, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check this weekEPSS 47.00%May 22, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 10.2 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check this weekEPSS 46.00%May 22, 2025
- Medium4.9An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check this weekEPSS 44.00%May 22, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 0.00%May 21, 2025