A Stored Cross-Site Scripting vulnerability allowed the execution of a ...

Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted public projects via API

Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted public projects via API

Missing permission check on fork relation creation in GitLab CE/EE 11. ...

A Reflected Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code on the Static Site Editor in GitLab CE/EE 12.10 and later through 13.0.1

A Reflected Cross-Site Scripting vulnerability allowed the execution o ...

A specially crafted request could be used to confirm the existence of files hosted on object storage services, without disclosing their contents. This vulnerability affects GitLab CE/EE 12.10 and later through 13.0.1

A specially crafted request could be used to confirm the existence of ...

A Stored Cross-Site Scripting vulnerability allowed the execution on Javascript payloads on the Metrics Dashboard in GitLab CE/EE 12.8 and later through 13.0.1

A Stored Cross-Site Scripting vulnerability allowed the execution on J ...

Insecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and later through 13.0.1 allows users to update permissions of other users' deploy keys under certain conditions

Insecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and ...

User email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user to bypass email verification

User email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user to bypass email verification

User email verification bypass in GitLab CE/EE 12.5 and later through ...

Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view Kubernetes cluster token

Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view Kubernetes cluster token

Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later thr ...

An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions.

An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions.