Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 5 920
GHSA-j875-427q-5q22
An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1.
CVE-2025-1763
An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1.
CVE-2025-1763
An issue has been discovered in GitLab EE that allows for cross-site-s ...
BDU:2025-06611
Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/ CE, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
GHSA-8jx5-64fv-87qh
An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A Discord webhook integration may cause DoS.
GHSA-mqcw-437p-q69q
A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3 and 18.0 prior to 18.0.1 where an attacker can cause a branch name confusion in confidential MRs.
CVE-2024-9163
A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3 and 18.0 prior to 18.0.1 where an attacker can cause a branch name confusion in confidential MRs.
CVE-2024-9163
A business logic error in GitLab CE/EE affecting all versions starting ...
CVE-2024-7803
An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A Discord webhook integration may cause DoS.
CVE-2024-7803
An issue has been discovered in GitLab CE/EE affecting all versions fr ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-j875-427q-5q22 An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. | CVSS3: 8.7 | 1% Низкий | около 1 года назад |
 | CVE-2025-1763 An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. | CVSS3: 8.7 | 1% Низкий | около 1 года назад |
| CVE-2025-1763 An issue has been discovered in GitLab EE that allows for cross-site-s ... | CVSS3: 8.7 | 1% Низкий | около 1 года назад |
 | BDU:2025-06611 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/ CE, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS) | CVSS3: 8.7 | 1% Низкий | около 1 года назад |
| GHSA-8jx5-64fv-87qh An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A Discord webhook integration may cause DoS. | CVSS3: 6.5 | 0% Низкий | около 1 года назад |
| GHSA-mqcw-437p-q69q A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3 and 18.0 prior to 18.0.1 where an attacker can cause a branch name confusion in confidential MRs. | CVSS3: 3.5 | 0% Низкий | около 1 года назад |
| CVE-2024-9163 A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3 and 18.0 prior to 18.0.1 where an attacker can cause a branch name confusion in confidential MRs. | CVSS3: 3.5 | 0% Низкий | около 1 года назад |
| CVE-2024-9163 A business logic error in GitLab CE/EE affecting all versions starting ... | CVSS3: 3.5 | 0% Низкий | около 1 года назад |
| CVE-2024-7803 An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A Discord webhook integration may cause DoS. | CVSS3: 6.5 | 0% Низкий | около 1 года назад |
| CVE-2024-7803 An issue has been discovered in GitLab CE/EE affecting all versions fr ... | CVSS3: 6.5 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу