How many CVEs does GitLab GitLab Runner have?

GitLab GitLab Runner has 6 published CVE records since 2020.

How many GitLab GitLab Runner CVEs are in CISA KEV?

None of GitLab GitLab Runner's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for GitLab GitLab Runner vulnerabilities?

Yes — 1 of GitLab GitLab Runner's CVEs have a known public exploit.

Which versions of GitLab GitLab Runner are affected?

23 distinct GitLab GitLab Runner versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in GitLab GitLab Runner CVEs?

GitLab GitLab Runner's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-400 (Uncontrolled Resource Consumption), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-918 (Server-Side Request Forgery (SSRF)).

How many critical GitLab GitLab Runner vulnerabilities are there?

GitLab GitLab Runner has 1 critical and 4 high-severity CVEs.

What is the average severity of GitLab GitLab Runner CVEs?

The average CVSS base score across GitLab GitLab Runner's scored CVEs is 7.9.

GitLab Runner Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: GitLab Runner vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

GitLab Runner Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

GitLab Runner has 6 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.9.

Severity and exploitation

How the CVSS severity of GitLab Runner's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High4

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of GitLab Runner's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of GitLab Runner's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every GitLab Runner version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

>=14.5, <14.5.22 CVEs
<14.3.41 CVE
<15.3.51 CVE
>=1.0, <13.0.121 CVE
>=12.0.0, <13.2.41 CVE
>=13.1, <13.1.61 CVE
>=13.2, <13.2.31 CVE
>=13.2.0, <13.2.101 CVE
>=13.3.0, <13.3.21 CVE
>=13.3.0, <13.3.71 CVE
>=13.4.0, <13.4.11 CVE
>=13.4.0, <13.4.2

Common weakness types

The CWE weakness categories most often found in GitLab Runner CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many GitLab Runner CVEs were published each year.

2020

2021

2022

2023

Other GitLab products

Browse vulnerabilities for other products by GitLab.

gitlab1,497 CVEs GitLab EE48 CVEs GitLab CE32 CVEs GitLab CE/EE28 CVEs GitLab Community and Enterprise Editions13 CVEs gitlab-shell5 CVEs dynamic application security testing analyzer4 CVEs

Frequently asked questions

Common questions about GitLab Runner vulnerabilities.

How many CVEs does GitLab GitLab Runner have?: GitLab GitLab Runner has 6 published CVE records since 2020.
How many GitLab GitLab Runner CVEs are in CISA KEV?: None of GitLab GitLab Runner's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for GitLab GitLab Runner vulnerabilities?: Yes — 1 of GitLab GitLab Runner's CVEs have a known public exploit.
Which versions of GitLab GitLab Runner are affected?: 23 distinct GitLab GitLab Runner versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in GitLab GitLab Runner CVEs?: GitLab GitLab Runner's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-400 (Uncontrolled Resource Consumption), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-918 (Server-Side Request Forgery (SSRF)).
How many critical GitLab GitLab Runner vulnerabilities are there?: GitLab GitLab Runner has 1 critical and 4 high-severity CVEs.
What is the average severity of GitLab GitLab Runner CVEs?: The average CVSS base score across GitLab GitLab Runner's scored CVEs is 7.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track GitLab Runner vulnerabilities

Get an alert for each new GitLab Runner CVE, with AI-written analysis and remediation steps.

Create an account See pricing

GitLab Runner Vulnerabilities