VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

严重高危中危低危Exploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

gitlaboracleibmgoogleadobemicrosoftmozillaciscoapacheappleredhatjenkinshpAll vendors →

gitlab products

gitlab 1507gitlab-shell 5dynamic application security testing analyzer 4runner 3gitlab-vscode-extension 2:api::v4 project:gitlab::api::v4 1dast api scanner 1gitaly 1gitlab runner 1language server 1omnibus 1

404,635 vulnerabilities · 1,769 actively exploited (CISA KEV)

gitlab ✕Clear filters

1,522 results

ID	Severity	Summary	Published
CVE-2019-18453	中危4.3	An issue was discovered in GitLab Community and Enterprise Edition 11.6 through 12.4 in the add comments via email feature. It has Insecure Permissions.	26/11/2019
CVE-2019-18452	中危5.3	An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4 when moving an issue to a public project from a private one. It has Insecure Permissions.	26/11/2019
CVE-2019-18451	中危6.1	An issue was discovered in GitLab Community and Enterprise Edition 10.7.4 through 12.4 in the InternalRedirect filtering feature. It has an Open Redirect.	26/11/2019
CVE-2019-18450	中危4.3	An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions.