Class familyGitLab
GitLab SSRF flaws, 2021–2026
11 GitLab CVEs with CWE-918 weaknesses, 11 Jun 2021 to 13 Oct 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2021’21
2022’22
1 2023’23
2 2024’24
2 2025’25
5 2026’26
In CISA KEVNot in KEV
20211 CVE, 1 in KEV
20231 CVE
20242 CVEs
20252 CVEs
20265 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2021-22175KEV | 11 Jun 2021 | GitLab Server-Side Request Forgery (SSRF) Vulnerability | Grouped by weakness | 69.7 |
| CVE-2022-4201 | 27 Jan 2023 | A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1… | Grouped by weakness | 11.6 |
| CVE-2024-8635 | 12 Sep 2024 | Server-Side Request Forgery (SSRF) in GitLab | Grouped by weakness | 14.7 |
| CVE-2024-8977 | 10 Oct 2024 | Server-Side Request Forgery (SSRF) in GitLab | Grouped by weakness | 20.0 |
| CVE-2023-6195 | 30 Jan 2025 | Server-Side Request Forgery (SSRF) in GitLab | Grouped by weakness | 11.8 |
| CVE-2025-6454 | 12 Sep 2025 | Server-Side Request Forgery (SSRF) in GitLab | Grouped by weakness | 21.8 |
| CVE-2025-12073 | 11 Feb 2026 | Server-Side Request Forgery (SSRF) in GitLab | Grouped by weakness | 11.7 |
| CVE-2025-12575 | 11 Feb 2026 | Server-Side Request Forgery (SSRF) in GitLab | Grouped by weakness | 10.5 |
| CVE-2026-7471 | 14 May 2026 | Server-Side Request Forgery (SSRF) in GitLab | Grouped by weakness | 3.7 |
| CVE-2026-9204 | 11 Jun 2026 | Server-Side Request Forgery (SSRF) in GitLab | Grouped by weakness | 6.9 |
| CVE-2026-100104 | 13 Oct 2026 | Server-Side Request Forgery (SSRF) in GitLab | Grouped by weakness | 4.4 |