Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/gitlab@14.0.3-1
purl pkg:alpm/archlinux/gitlab@14.0.3-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (12)
Vulnerability Summary Aliases
VCID-55tn-dhah-8fak A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call mutations as the victim CVE-2021-22224
VCID-64wb-wrxa-afb2 Insufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted markdown CVE-2021-22225
VCID-a1z8-2fdu-1uhd Arbitrary Code Execution in Rdoc In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. CVE-2021-31799
GHSA-ggxm-pgc9-g7fp
VCID-ad6q-uvub-77ff An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13.12.6, and all versions starting from 14.0 before 14.0.2. Improper access control allows unauthorised users to access project details using Graphql. CVE-2021-22228
VCID-ewf1-jsf4-nqe8 Under certain conditions, some users were able to push to protected branches that were restricted to deploy keys in GitLab CE/EE since version 13.9 CVE-2021-22226
VCID-j2d6-26gv-j3f9 An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8. Under a special condition it was possible to access data of an internal repository through project fork done by a project member. CVE-2021-22229
VCID-ktjp-pvqu-5yf7 A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows attacker to reject access to their profile page via using a specially crafted username. CVE-2021-22231
VCID-p3g7-kade-fqfq A reflected cross-site script vulnerability in GitLab before versions 13.11.6, 13.12.6 and 14.0.2 allowed an attacker to send a malicious link to a victim and trigger actions on their behalf if they clicked it CVE-2021-22227
VCID-s41d-jhp9-ckae HTML injection was possible via the full name field before versions 13.11.6, 13.12.6, and 14.0.2 in GitLab CE CVE-2021-22232
VCID-ye5q-51wd-53c5 Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feature flag name to PUT requests on behalf of other users via clicking on a link CVE-2021-22223
VCID-yq7h-64jj-wfcs An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to read project details CVE-2021-22233
VCID-yx48-ptwa-ukhh Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability affects GitLab CE/EE 9.3 and later through 13.11.6, 13.12.6, and 14.0.2. CVE-2021-22230

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:26:40.553370+00:00 Arch Linux Importer Fixing VCID-yq7h-64jj-wfcs https://security.archlinux.org/AVG-2137 38.0.0
2026-04-01T18:25:30.043697+00:00 Arch Linux Importer Fixing VCID-ye5q-51wd-53c5 https://security.archlinux.org/AVG-2125 38.0.0
2026-04-01T18:25:30.019185+00:00 Arch Linux Importer Fixing VCID-55tn-dhah-8fak https://security.archlinux.org/AVG-2125 38.0.0
2026-04-01T18:25:29.995528+00:00 Arch Linux Importer Fixing VCID-64wb-wrxa-afb2 https://security.archlinux.org/AVG-2125 38.0.0
2026-04-01T18:25:29.972349+00:00 Arch Linux Importer Fixing VCID-ewf1-jsf4-nqe8 https://security.archlinux.org/AVG-2125 38.0.0
2026-04-01T18:25:29.948724+00:00 Arch Linux Importer Fixing VCID-p3g7-kade-fqfq https://security.archlinux.org/AVG-2125 38.0.0
2026-04-01T18:25:29.921573+00:00 Arch Linux Importer Fixing VCID-ad6q-uvub-77ff https://security.archlinux.org/AVG-2125 38.0.0
2026-04-01T18:25:29.899462+00:00 Arch Linux Importer Fixing VCID-j2d6-26gv-j3f9 https://security.archlinux.org/AVG-2125 38.0.0
2026-04-01T18:25:29.876460+00:00 Arch Linux Importer Fixing VCID-yx48-ptwa-ukhh https://security.archlinux.org/AVG-2125 38.0.0
2026-04-01T18:25:29.852723+00:00 Arch Linux Importer Fixing VCID-ktjp-pvqu-5yf7 https://security.archlinux.org/AVG-2125 38.0.0
2026-04-01T18:25:29.830467+00:00 Arch Linux Importer Fixing VCID-s41d-jhp9-ckae https://security.archlinux.org/AVG-2125 38.0.0
2026-04-01T18:25:29.805717+00:00 Arch Linux Importer Fixing VCID-a1z8-2fdu-1uhd https://security.archlinux.org/AVG-2125 38.0.0