GitLab GitLab Runner vulnerabilities

CVEs per yearBy the year they were published

1. 20203
2. 20211
3. 20221
4. 20231

Newest CVEs

• CVE-2022-2251

  Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user who…

  GitLab · GitLab Runner

  Medium4.8
• CVE-2021-39947

  In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the file descriptor 0 for…

  GitLab · GitLab Runner

  Medium5.3
• CVE-2021-39939

  An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before 14.3.6, all versions starting from 14.4…

  GitLab · GitLab Runner

  Medium6.5
• CVE-2020-13327

  An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 before 13.3.7, all…

  GitLab · GitLab Runner

  Medium6.0
• CVE-2020-13347

  A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured on a Windows…

  GitLab · GitLab Runner

  Critical9.1
• CVE-2020-13295

  For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF.

  GitLab · GitLab Runner

  Medium5.4