GitLab 18.0.0 Community Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:gitlab:gitlab:18.0.0:*:*:*:community:*:*:*
part: a version: 18.0.0 update: *
| Vendor | Gitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90) |
|---|---|
| Product | Gitlab (5414fcda-a172-5f72-b6e4-b415a19d21eb) |
| Edition | * |
| Language | * |
| Software edition | community |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gitlab/gitlab-org/gitlab |
purl2cpe | 2026-06-01 10:14:46.352353 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-5195 |
vulnerable | 2026-06-08 07:35:24.356616 |
Authorization Bypass Through User-Controlled Key in GitLab
MEDIUM (4.3)
An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. It was possible for authenticated users to access arbitrary compliance frameworks, leading to unauthorized data disclosure.
Published: 2025-06-12T10:31:00.372Z
Updated: 2025-06-12T13:25:45.847Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4979 |
vulnerable | 2026-06-08 07:29:17.619738 |
Insufficient Granularity of Access Control in GitLab
MEDIUM (4.9)
An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. An attacker may be able to reveal masked or hidden CI variables (that they did not author) in the WebUI, by simply creating their own variable and observing the HTTP response.
Published: 2025-05-22T13:30:28.496Z
Updated: 2025-05-22T14:21:32.253Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3111 |
vulnerable | 2026-06-08 07:23:08.125863 |
Allocation of Resources Without Limits or Throttling in GitLab
MEDIUM (6.5)
An issue has been discovered in GitLab CE/EE affecting all versions from 10.2 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A lack of input validation in the Kubernetes integration could allow an authenticated user to cause denial of service..
Published: 2025-05-22T13:30:43.544Z
Updated: 2025-05-22T14:51:11.125Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2853 |
vulnerable | 2026-06-08 07:16:58.506614 |
Allocation of Resources Without Limits or Throttling in GitLab
MEDIUM (6.5)
An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A lack of proper validation in GitLab could allow an authenticated user to cause a denial of service condition.
Published: 2025-05-22T13:30:48.335Z
Updated: 2025-05-22T14:50:36.079Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1478 |
vulnerable | 2026-06-08 07:08:37.045131 |
Allocation of Resources Without Limits or Throttling in GitLab
MEDIUM (6.5)
An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A lack of input validation in Board Names could be used to trigger a denial of service.
Published: 2025-06-12T10:02:49.998Z
Updated: 2025-06-12T13:30:42.186Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1110 |
vulnerable | 2026-06-08 07:06:36.939176 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0993 |
vulnerable | 2026-06-08 07:02:26.114513 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0679 |
vulnerable | 2026-06-08 07:02:25.164244 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0605 |
vulnerable | 2026-06-08 07:02:24.939774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9163 |
vulnerable | 2026-06-08 07:00:26.824382 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7803 |
vulnerable | 2026-06-08 06:58:23.458129 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12093 |
vulnerable | 2026-06-08 06:23:51.247707 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.