Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.

Релизный цикл, информация об уязвимостях

Продукт: Gitlab

Вендор: gitlab

График релизов

Релизные элементы

KB	Версия	Билд	Дата доступности
	17.0.8	17.0.8
	17.0.7	17.0.7
	17.0.6	17.0.6
	17.0.5	17.0.5
	17.0.4	17.0.4
	17.0.3	17.0.3
	17.0.2	17.0.2
	17.0.1	17.0.1
	17.0.0	17.0.0

Показывать по

Недавние уязвимости Gitlab

Количество 5 918

CVE-2026-4524

3 месяца назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions ...

CVSS3: 6.5

EPSS: Низкий

CVE-2026-4524

3 месяца назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to access confidential issue content in public projects without proper authorization due to improper authorization checks.

CVSS3: 6.5

EPSS: Низкий

CVE-2026-3607

3 месяца назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions ...

CVSS3: 4.3

EPSS: Низкий

CVE-2026-3607

3 месяца назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with developer-role permissions to bypass package protection rules due to improper access control.

CVSS3: 4.3

EPSS: Низкий

CVE-2026-3160

3 месяца назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to view Jira issues outside the configured project scope due to an integration filter functioning only as a display control rather than enforcing access boundaries as specified.

CVSS3: 5.8

EPSS: Низкий

CVE-2026-3160

3 месяца назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions ...

CVSS3: 5.8

EPSS: Низкий

CVE-2026-3074

3 месяца назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to download private debugging symbols from inaccessible projects due to improper access control.

CVSS3: 4.3

EPSS: Низкий

CVE-2026-3074

3 месяца назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions ...

CVSS3: 4.3

EPSS: Низкий

CVE-2026-3073

3 месяца назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with developer-role permissions to bypass PyPI package protection rules and upload restricted packages due to improper authorization checks.

CVSS3: 4.3

EPSS: Низкий

CVE-2026-3073

3 месяца назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions ...

CVSS3: 4.3

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано 1
CVE-2026-4524 GitLab has remediated an issue in GitLab CE/EE affecting all versions ...	CVSS3: 6.5	0% Низкий	3 месяца назад
CVE-2026-4524 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to access confidential issue content in public projects without proper authorization due to improper authorization checks.	CVSS3: 6.5	0% Низкий	3 месяца назад
CVE-2026-3607 GitLab has remediated an issue in GitLab CE/EE affecting all versions ...	CVSS3: 4.3	0% Низкий	3 месяца назад
CVE-2026-3607 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with developer-role permissions to bypass package protection rules due to improper access control.	CVSS3: 4.3	0% Низкий	3 месяца назад
CVE-2026-3160 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to view Jira issues outside the configured project scope due to an integration filter functioning only as a display control rather than enforcing access boundaries as specified.	CVSS3: 5.8	0% Низкий	3 месяца назад
CVE-2026-3160 GitLab has remediated an issue in GitLab CE/EE affecting all versions ...	CVSS3: 5.8	0% Низкий	3 месяца назад
CVE-2026-3074 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to download private debugging symbols from inaccessible projects due to improper access control.	CVSS3: 4.3	0% Низкий	3 месяца назад
CVE-2026-3074 GitLab has remediated an issue in GitLab CE/EE affecting all versions ...	CVSS3: 4.3	0% Низкий	3 месяца назад
CVE-2026-3073 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with developer-role permissions to bypass PyPI package protection rules and upload restricted packages due to improper authorization checks.	CVSS3: 4.3	0% Низкий	3 месяца назад
CVE-2026-3073 GitLab has remediated an issue in GitLab CE/EE affecting all versions ...	CVSS3: 4.3	0% Низкий	3 месяца назад

Уязвимостей на страницу