Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/gitlab@14.10-1
purl pkg:alpm/archlinux/gitlab@14.10-1
Next non-vulnerable version 14.10.2-1
Latest non-vulnerable version 15.2.1-1
Risk 4.0
Vulnerabilities affecting this package (13)
Vulnerability Summary Fixed by
VCID-1tja-ztb9-myhy
Aliases:
CVE-2022-1431
An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious requests to the PyPi API endpoint allowing the attacker to cause uncontrolled resource consumption.
14.10.2-1
Affected by 0 other vulnerabilities.
VCID-221v-5q8x-5ygz
Aliases:
CVE-2022-1417
Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting from 14.9 before 14.9.4, and all versions starting from 14.10 before 14.10.1 allows non-project members to access contents of Project Members-only Wikis via malicious CI jobs
14.10.2-1
Affected by 0 other vulnerabilities.
VCID-2gxb-vk9m-c3hd
Aliases:
CVE-2022-1460
An issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not performing correct authorizations on scheduled pipelines allowing a malicious user to run a pipeline in the context of another user.
14.10.2-1
Affected by 0 other vulnerabilities.
VCID-4xun-1v5s-uqbt
Aliases:
CVE-2022-1433
An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. Missing invalidation of Markdown caching causes potential payloads from a previously exploitable XSS vulnerability (CVE-2022-1175) to persist and execute.
14.10.2-1
Affected by 0 other vulnerabilities.
VCID-62y5-e7f4-7kbz
Aliases:
CVE-2022-1413
Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 causes potentially sensitive integration properties to be disclosed in the web interface
14.10.2-1
Affected by 0 other vulnerabilities.
VCID-a4kg-mmhm-jqhp
Aliases:
CVE-2022-1352
Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions from 11.0 prior to 14.8.6, 14.9 prior to 14.9.4, and 14.10 prior to 14.10.1, an endpoint may reveal the issue title to a user who crafted an API call with the ID of the issue from a public project that restricts access to issue only to project members.
14.10.2-1
Affected by 0 other vulnerabilities.
VCID-bvmd-gmg3-eue2
Aliases:
CVE-2022-1426
An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly authenticating a user that had some certain amount of information which allowed an user to authenticate without a personal access token.
14.10.2-1
Affected by 0 other vulnerabilities.
VCID-hawe-rs16-37bf
Aliases:
CVE-2022-1416
Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows for rendering of attacker controlled HTML tags and CSS styling
14.10.2-1
Affected by 0 other vulnerabilities.
VCID-rc6v-b3x8-87bu
Aliases:
CVE-2022-1124
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled
14.10.2-1
Affected by 0 other vulnerabilities.
VCID-svws-7gd2-r3f5
Aliases:
CVE-2022-1428
An issue has been discovered in GitLab affecting all versions before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was incorrectly verifying throttling limits for authenticated package requests which resulted in limits not being enforced.
14.10.2-1
Affected by 0 other vulnerabilities.
VCID-wt3g-99mt-uug6
Aliases:
CVE-2022-1406
Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0 allows a Developer to read protected Group or Project CI/CD variables by importing a malicious project
14.10.2-1
Affected by 0 other vulnerabilities.
VCID-wvtd-44nu-ckgb
Aliases:
CVE-2022-1423
Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows a malicious actor with Developer privileges to perform cache poisoning leading to arbitrary code execution in protected branches
14.10.2-1
Affected by 0 other vulnerabilities.
VCID-ykza-d472-n7a4
Aliases:
CVE-2022-1510
An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious text in the CI Editor and CI Pipeline details page allowing the attacker to cause uncontrolled resource consumption.
14.10.2-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:25:07.840645+00:00 Arch Linux Importer Affected by VCID-rc6v-b3x8-87bu https://security.archlinux.org/AVG-2696 38.0.0
2026-04-01T18:25:07.819006+00:00 Arch Linux Importer Affected by VCID-a4kg-mmhm-jqhp https://security.archlinux.org/AVG-2696 38.0.0
2026-04-01T18:25:07.797831+00:00 Arch Linux Importer Affected by VCID-wt3g-99mt-uug6 https://security.archlinux.org/AVG-2696 38.0.0
2026-04-01T18:25:07.776381+00:00 Arch Linux Importer Affected by VCID-62y5-e7f4-7kbz https://security.archlinux.org/AVG-2696 38.0.0
2026-04-01T18:25:07.753972+00:00 Arch Linux Importer Affected by VCID-hawe-rs16-37bf https://security.archlinux.org/AVG-2696 38.0.0
2026-04-01T18:25:07.729839+00:00 Arch Linux Importer Affected by VCID-221v-5q8x-5ygz https://security.archlinux.org/AVG-2696 38.0.0
2026-04-01T18:25:07.707347+00:00 Arch Linux Importer Affected by VCID-wvtd-44nu-ckgb https://security.archlinux.org/AVG-2696 38.0.0
2026-04-01T18:25:07.686597+00:00 Arch Linux Importer Affected by VCID-bvmd-gmg3-eue2 https://security.archlinux.org/AVG-2696 38.0.0
2026-04-01T18:25:07.661631+00:00 Arch Linux Importer Affected by VCID-svws-7gd2-r3f5 https://security.archlinux.org/AVG-2696 38.0.0
2026-04-01T18:25:07.638276+00:00 Arch Linux Importer Affected by VCID-1tja-ztb9-myhy https://security.archlinux.org/AVG-2696 38.0.0
2026-04-01T18:25:07.615071+00:00 Arch Linux Importer Affected by VCID-4xun-1v5s-uqbt https://security.archlinux.org/AVG-2696 38.0.0
2026-04-01T18:25:07.592421+00:00 Arch Linux Importer Affected by VCID-2gxb-vk9m-c3hd https://security.archlinux.org/AVG-2696 38.0.0
2026-04-01T18:25:07.568549+00:00 Arch Linux Importer Affected by VCID-ykza-d472-n7a4 https://security.archlinux.org/AVG-2696 38.0.0