Gitlab -- vulnerabilities

2026-03-29 · CVE-2026-2370, CVE-2026-3857, CVE-2026-2995, CVE-2026-3988, CVE-2026-2745, CVE-2026-1724, CVE-2025-13436, CVE-2025-13078, CVE-2026-2973, CVE-2026-2726, CVE-2025-14595, CVE-2026-4363 · VuXML entry

Gitlab reports: Improper Handling of Parameters issue in Jira Connect installations impacts GitLab CE/EE Cross-Site Request Forgery issue in GLQL API impacts GitLab CE/EE HTML Injection in vulnerability report impacts GitLab EE Denial of Service issue in GraphQL API impacts GitLab CE/EE Improper Access Control issue in WebAuthn 2FA impacts GitLab CE/EE Improper Access Control issue in GraphQL query impacts GitLab EE …

Affected versions

• gitlab-ce, gitlab-ee >= 18.10.0 < 18.10.1; >= 18.9.0 < 18.9.3; >= 7.11.0 < 18.8.7

By system

0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.