GitLab Community Edition, Enterprise Edition

Name: GitLab Community Edition, Enterprise Edition
Brand: GitLab

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical14high26medium1low

updated 2026-10-28

vulnerabilities (110)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-27407US	—	3.10% (88th)	Exploit	no fix	2025-03-12	14 versions
CVE-2025-25292US	critical9.8	65.1% (99th)	—	no fix	2025-03-12	14 versions
CVE-2025-25291US	critical9.8	21.0% (98th)	—	no fix	2025-03-12	14 versions
CVE-2025-12562US	—	0.86% (58th)	—	no fix	2025-12-11	≤ vers:unknown/*
CVE-2025-6454US	high8.8	0.73% (54th)	—	no fix	2025-09-12	≤ vers:unknown/*
CVE-2024-13054US	medium6.5	0.65% (51st)	—	no fix	2025-03-13	14 versions
CVE-2026-12053US	high7.5	0.63% (50th)	—	no fix	2026-06-25	≤ vers:unknown/*
CVE-2025-8014US	—	0.59% (48th)	—	no fix	2025-09-27	≤ vers:unknown/*
CVE-2025-10858US	—	0.58% (47th)	—	no fix	2025-09-26	≤ vers:unknown/*
CVE-2024-12380US	high7.5	0.57% (47th)	—	no fix	2025-03-13	14 versions
CVE-2025-9642US	critical9.6	0.56% (46th)	—	no fix	2025-09-26	≤ vers:unknown/*
CVE-2025-10004US	—	0.53% (45th)	—	no fix	2025-10-09	≤ vers:unknown/*
CVE-2025-2934US	medium6.5	0.53% (45th)	—	no fix	2025-10-09	≤ vers:unknown/*
CVE-2025-12571US	—	0.53% (45th)	—	no fix	2025-11-26	≤ vers:unknown/*
CVE-2025-2256US	—	0.53% (45th)	—	no fix	2025-09-12	≤ vers:unknown/*
CVE-2025-12029US	—	0.53% (44th)	—	no fix	2025-12-11	≤ vers:unknown/*
CVE-2025-8405US	—	0.52% (44th)	—	no fix	2025-12-11	≤ vers:unknown/*
CVE-2024-7803US	high7.5	0.51% (44th)	—	no fix	2025-05-23	11 versions
CVE-2025-9958US	—	0.51% (43rd)	—	no fix	2025-09-26	≤ vers:unknown/*
CVE-2025-0993US	medium6.5	0.51% (43rd)	—	no fix	2025-05-22	11 versions
CVE-2025-0475US	medium6.1	0.50% (42nd)	—	no fix	2025-03-03	6 versions
CVE-2025-10094US	—	0.49% (42nd)	—	no fix	2025-09-12	≤ vers:unknown/*
CVE-2025-7337US	—	0.49% (42nd)	—	no fix	2025-09-12	≤ vers:unknown/*
CVE-2025-1250US	—	0.49% (42nd)	—	no fix	2025-09-12	≤ vers:unknown/*
CVE-2025-0555US	medium6.1	0.49% (42nd)	—	no fix	2025-03-03	6 versions
CVE-2026-2238US	—OT elevated	0.47% (41st)	—	no fix	2026-06-25	≤ vers:unknown/*
CVE-2024-12093US	—	0.47% (41st)	—	no fix	2025-05-22	11 versions
CVE-2025-2853US	medium6.5	0.47% (40th)	—	no fix	2025-05-22	11 versions
CVE-2025-3111US	medium6.5	0.46% (40th)	—	no fix	2025-05-22	11 versions
CVE-2025-1257US	high7.5	0.46% (40th)	—	no fix	2025-03-13	14 versions
CVE-2025-7449US	—	0.44% (38th)	—	no fix	2025-11-26	≤ vers:unknown/*
CVE-2025-4979US	high7.5	0.44% (38th)	—	no fix	2025-05-22	11 versions
CVE-2026-10712US	medium6.1	0.43% (37th)	—	no fix	2026-06-25	≤ vers:unknown/*
CVE-2025-12716US	—	0.42% (37th)	—	no fix	2025-12-11	≤ vers:unknown/*
CVE-2025-0652US	medium6.5OT elevated	0.42% (36th)	—	no fix	2025-03-13	14 versions
CVE-2026-5952US	—OT elevated	0.40% (35th)	—	no fix	2026-06-25	≤ vers:unknown/*
CVE-2024-9163US	high7.5	0.40% (34th)	—	no fix	2025-05-23	11 versions
CVE-2025-11984US	—OT elevated	0.39% (33rd)	—	no fix	2025-12-11	≤ vers:unknown/*
CVE-2025-9825US	medium6.5OT elevated	0.39% (33rd)	—	no fix	2025-11-21	≤ vers:unknown/*
CVE-2026-5796US	—OT elevated	0.39% (33rd)	—	no fix	2026-06-25	≤ vers:unknown/*
CVE-2025-7691US	high8.8	0.38% (32nd)	—	no fix	2025-09-26	≤ vers:unknown/*
CVE-2025-10871US	high7.2OT elevated	0.38% (32nd)	—	no fix	2025-09-26	≤ vers:unknown/*
CVE-2025-11340US	—OT elevated	0.37% (31st)	—	no fix	2025-10-09	≤ vers:unknown/*
CVE-2026-7250US	—	0.37% (31st)	—	no fix	2026-06-11	≤ vers:unknown/*
CVE-2024-7296US	—OT elevated	0.36% (30th)	—	no fix	2025-03-13	14 versions
CVE-2026-1606US	—	0.36% (30th)	—	no fix	2026-06-25	≤ vers:unknown/*
CVE-2026-1659US	—	0.36% (29th)	—	no fix	2026-05-14	≤ vers:unknown/*
CVE-2025-14869US	—	0.35% (29th)	—	no fix	2026-05-14	≤ vers:unknown/*
CVE-2026-10086US	medium5.4	0.35% (28th)	—	no fix	2026-06-25	≤ vers:unknown/*
CVE-2024-8186US	medium5.4	0.35% (28th)	—	no fix	2025-03-03	6 versions

showing 50 of 110

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-770Allocation of Resources Without Limits or Throttling24 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')14 CVEs
CWE-863Incorrect Authorization11 CVEs
CWE-639Authorization Bypass Through User-Controlled Key10 CVEs
CWE-862Missing Authorization7 CVEs
CWE-1284Improper Validation of Specified Quantity in Input3 CVEs
CWE-532Insertion of Sensitive Information into Log File3 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs

sources (1)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)110 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan