| CVE-2019-19262 | MEDIO4.3 | GitLab Enterprise Edition (EE) 11.9 and later through 12.5 has Insecure Permissions. | 03/01/2020 |
| CVE-2019-19261 | ALTO8.8 | GitLab Enterprise Edition (EE) 6.7 and later through 12.5 allows SSRF. | 03/01/2020 |
| CVE-2019-19260 | MEDIO5.4 | GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 2 of 2). | 03/01/2020 |
| CVE-2019-19259 | MEDIO4.3 | GitLab Enterprise Edition (EE) 11.3 and later through 12.5 allows an Insecure Direct Object Reference (IDOR). | 03/01/2020 |
| CVE-2019-19258 | MEDIO5.3 | GitLab Enterprise Edition (EE) 10.8 and later through 12.5 has Incorrect Access Control. | 03/01/2020 |
| CVE-2019-19257 | MEDIO5.3 | GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 1 of 2). | 03/01/2020 |
| CVE-2019-19256 | MEDIO5.3 | GitLab Enterprise Edition (EE) 12.2 and later through 12.5 has Incorrect Access Control. | 03/01/2020 |
| CVE-2019-19255 | MEDIO4.3 | GitLab Enterprise Edition (EE) 12.3 and later through 12.5 has Incorrect Access Control. | 03/01/2020 |
| CVE-2019-19311 | MEDIO5.4 | GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields. | 03/01/2020 |
| CVE-2019-19254 | MEDIO5.3 | GitLab Community Edition (CE) and Enterprise Edition (EE). 9.6 and later through 12.5 has Incorrect Access Control. | 03/01/2020 |
| CVE-2019-19088 | CRÍTICO9.8 | Gitlab Enterprise Edition (EE) 11.3 through 12.4.2 allows Directory Traversal. | 03/01/2020 |
| CVE-2019-19087 | MEDIO4.3 | Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 2 of 2). | 03/01/2020 |
| CVE-2019-19086 | MEDIO4.3 | Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 1 of 2). | 03/01/2020 |
| CVE-2018-20507 | MEDIO5.3 | An issue was discovered in GitLab Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control. | 30/12/2019 |
| CVE-2018-20501 | MEDIO6.3 | An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control. | 30/12/2019 |
| CVE-2018-20499 | ALTO7.2 | An issue was discovered in GitLab Community and Enterprise Edition before 11.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows SSRF. | 30/12/2019 |
| CVE-2018-20498 | MEDIO4.3 | An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control. | 30/12/2019 |
| CVE-2018-20497 | MEDIO5.0 | An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows SSRF. | 30/12/2019 |
| CVE-2018-20496 | MEDIO5.4 | An issue was discovered in GitLab Community and Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS. | 30/12/2019 |
| CVE-2018-20495 | MEDIO5.3 | An issue was discovered in GitLab Community and Enterprise Edition 11.3.x and 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows Information Exposure. | 30/12/2019 |