GitLab 18.11

Vulnerabilities in GitLab 18.11

151 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 03/11/2026.

• CVE-2026-75871, CVSS 3.1: 9.6: still open in 18.11.14
• CVE-2026-10053, CVSS 3.1: 8.8: still open in 18.11.14
• CVE-2026-84739, CVSS 3.1: 8.7: still open in 18.11.14
• CVE-2026-15217, CVSS 3.1: 8.7: still open in 18.11.14
• CVE-2026-15216, CVSS 3.1: 8.7: still open in 18.11.14
• CVE-2026-88765, CVSS 3.1: 8.5: still open in 18.11.14
• CVE-2026-16301, CVSS 3.1: 8.5: still open in 18.11.14
• CVE-2026-12436, CVSS 3.1: 8.4: still open in 18.11.14
• CVE-2026-15723, CVSS 3.1: 8.2: still open in 18.11.14
• CVE-2026-14814, CVSS 3.1: 8.2: still open in 18.11.14
• CVE-2026-18252, CVSS 3.1: 8.1: still open in 18.11.14
• CVE-2026-92470, CVSS 3.1: 7.7: still open in 18.11.14
• CVE-2026-81839, CVSS 3.1: 7.7: still open in 18.11.14
• CVE-2026-13210, CVSS 3.1: 7.7: still open in 18.11.14
• CVE-2026-7427, CVSS 3.1: 7.5: still open in 18.11.14
• CVE-2026-15975, CVSS 3.1: 7.5: still open in 18.11.14
• CVE-2026-1168, CVSS 3.1: 7.5: still open in 18.11.14
• CVE-2026-112212, CVSS 3.1: 7.5: still open in 18.11.14
• CVE-2025-14871, CVSS 3.1: 7.5: still open in 18.11.14
• CVE-2026-16255, CVSS 3.1: 7.1: still open in 18.11.14
• CVE-2026-3855, CVSS 3.1: 6.8: still open in 18.11.14
• CVE-2026-12664, CVSS 3.1: 6.8: still open in 18.11.14
• CVE-2026-77801, CVSS 3.1: 6.5: still open in 18.11.14
• CVE-2026-13319, CVSS 3.1: 6.5: still open in 18.11.14
• CVE-2026-105777, CVSS 3.1: 6.5: still open in 18.11.14
• CVE-2025-10903, CVSS 3.1: 6.5: still open in 18.11.14
• CVE-2024-11222, CVSS 3.1: 6.4: still open in 18.11.14
• CVE-2026-101168, CVSS 3.1: 6.2: still open in 18.11.14
• CVE-2026-78252, CVSS 3.1: 6.1: still open in 18.11.14
• CVE-2026-7767, CVSS 3.1: 5.8: still open in 18.11.14
• CVE-2026-3035, CVSS 3.1: 5.5: still open in 18.11.14
• CVE-2026-92874, CVSS 3.1: 5.4: still open in 18.11.14
• CVE-2026-4398, CVSS 3.1: 5.4: still open in 18.11.14
• CVE-2026-16553, CVSS 3.1: 5.4: still open in 18.11.14
• CVE-2026-12910, CVSS 3.1: 5.4: still open in 18.11.14
• CVE-2026-84284, CVSS 3.1: 5.3: still open in 18.11.14
• CVE-2026-6336, CVSS 3.1: 5.3: still open in 18.11.14
• CVE-2026-6267, CVSS 3.1: 5.3: still open in 18.11.14
• CVE-2026-16275, CVSS 3.1: 5.3: still open in 18.11.14
• CVE-2026-13113, CVSS 3.1: 5.3: still open in 18.11.14
• CVE-2026-14341, CVSS 3.1: 4.9: still open in 18.11.14
• CVE-2026-3093, CVSS 3.1: 4.7: still open in 18.11.14
• CVE-2026-100755, CVSS 3.1: 4.6: still open in 18.11.14
• CVE-2026-86341, CVSS 3.1: 4.4: still open in 18.11.14
• CVE-2026-9268, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-8667, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-82837, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-8030, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-7514, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-6821, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-6567, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-4879, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-4672, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-18244, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-16794, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-14552, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-14351, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-14210, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-112378, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-10518, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-104661, CVSS 3.1: 4.3: still open in 18.11.14
• CVE-2026-92528, CVSS 3.1: 4.2: still open in 18.11.14
• CVE-2026-5954, CVSS 3.1: 4.2: still open in 18.11.14
• CVE-2026-4523, CVSS 3.1: 3.7: still open in 18.11.14
• CVE-2026-7487, CVSS 3.1: 3.5: still open in 18.11.14
• CVE-2026-105711, CVSS 3.1: 3.5: still open in 18.11.14
• CVE-2026-100104, CVSS 3.1: 3.5: still open in 18.11.14
• CVE-2025-9486, CVSS 3.1: 3.3: still open in 18.11.14
• CVE-2026-92628, CVSS 3.1: 3.1: still open in 18.11.14
• CVE-2026-82632, CVSS 3.1: 3.1: still open in 18.11.14
• CVE-2026-14288, CVSS 3.1: 3.1: still open in 18.11.14
• CVE-2026-112326, CVSS 3.1: 3.1: still open in 18.11.14
• CVE-2025-14562, CVSS 3.1: 3.1: still open in 18.11.14
• CVE-2026-103549, CVSS 3.1: 2.7: still open in 18.11.14
• CVE-2026-85706, CVSS 3.1: 10.0, actively exploited: fixed in 18.11.12
• CVE-2026-110264, CVSS 3.1: 10.0: fixed in 18.11.13
• CVE-2026-87719, CVSS 3.1: 9.9: fixed in 18.11.12
• CVE-2026-19478, CVSS 3.1: 9.1: fixed in 18.11.11
• CVE-2026-8589, CVSS 3.1: 8.7: fixed in 18.11.5
• CVE-2026-10087, CVSS 3.1: 8.7: fixed in 18.11.5
• CVE-2026-4868, CVSS 3.1: 8.2: fixed in 18.11.4
• CVE-2026-5816, CVSS 3.1: 8.1: not affected in 18.11.14
• CVE-2026-4922, CVSS 3.1: 8.1: not affected in 18.11.14
• CVE-2026-1322, CVSS 3.1: 8.1: fixed in 18.11.3
• CVE-2026-7250, CVSS 3.1: 7.5: fixed in 18.11.5
• CVE-2026-1659, CVSS 3.1: 7.5: fixed in 18.11.3
• CVE-2026-1184, CVSS 3.1: 7.5: fixed in 18.11.3
• CVE-2025-14870, CVSS 3.1: 7.5: fixed in 18.11.3
• CVE-2025-14869, CVSS 3.1: 7.5: fixed in 18.11.3
• CVE-2026-19650, CVSS 3.1: 7.1: fixed in 18.11.11
• CVE-2026-9204, CVSS 3.1: 6.5: fixed in 18.11.5
• CVE-2026-8280, CVSS 3.1: 6.5: fixed in 18.11.3
• CVE-2026-4527, CVSS 3.1: 6.5: fixed in 18.11.3
• CVE-2026-4524, CVSS 3.1: 6.5: fixed in 18.11.3
• CVE-2026-1660, CVSS 3.1: 6.5: not affected in 18.11.14
• CVE-2026-1500, CVSS 3.1: 6.5: fixed in 18.11.5
• CVE-2026-1402, CVSS 3.1: 6.5: fixed in 18.11.4
• CVE-2025-6016, CVSS 3.1: 6.5: not affected in 18.11.14
• CVE-2025-3922, CVSS 3.1: 6.5: not affected in 18.11.14
• CVE-2025-0186, CVSS 3.1: 6.5: not affected in 18.11.14

And 51 more.