CVE security advisories and vulnerability history for GitLab CE by GitLab.
Last updated
GitLab CE has 32 published CVE records since 2021, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 27 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.
This page aggregates every publicly disclosed vulnerability (CVE) affecting GitLab CE, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of GitLab CE's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
2
2 of GitLab CE's CVEs are confirmed exploited in the wild.
Public exploits
27
27 of GitLab CE's CVEs have a known public exploit available.
Browse every GitLab CE version named in a CVE, then pick one to see only the CVEs that affect it.
No specific affected versions are recorded for GitLab CE; the CVEs below apply to the product without a version pin.
32 CVEs
Showing 30 of 32
The CWE weakness categories most often found in GitLab CE CVEs. Follow any weakness for its full explanation.
How many GitLab CE CVEs were published each year.
Browse vulnerabilities for other products by GitLab.
Common questions about GitLab CE vulnerabilities.
GitLab GitLab CE has 32 published CVE records since 2021.
Yes — 2 of GitLab GitLab CE's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Yes — 27 of GitLab GitLab CE's CVEs have a known public exploit.
GitLab GitLab CE's CVEs most often map to these CWE weakness types: CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-1284 (Improper Validation of Specified Quantity in Input), CWE-862 (Missing Authorization).
GitLab GitLab CE has 2 critical and 11 high-severity CVEs.
The average CVSS base score across GitLab GitLab CE's scored CVEs is 6.5.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new GitLab CE vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
