Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/gitlab@14.2.1-1
purl pkg:alpm/archlinux/gitlab@14.2.1-1
Next non-vulnerable version 14.2.2-1
Latest non-vulnerable version 15.2.1-1
Risk 3.1
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-ss7h-4jqj-rycp
Aliases:
CVE-2021-22258
The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses
14.2.2-1
Affected by 0 other vulnerabilities.
VCID-tfat-25ty-rfgj
Aliases:
CVE-2021-22238
An issue has been discovered in GitLab affecting all versions starting with 13.3. GitLab was vulnerable to a stored XSS by using the design feature in issues.
14.2.2-1
Affected by 0 other vulnerabilities.
VCID-ykmk-ymk1-b3a6
Aliases:
CVE-2021-22257
An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. The route for /user.keys is not restricted on instances with public visibility disabled. This allows user enumeration on such instances.
14.2.2-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:26:35.952609+00:00 Arch Linux Importer Affected by VCID-tfat-25ty-rfgj https://security.archlinux.org/AVG-2335 38.0.0
2026-04-01T18:26:35.929150+00:00 Arch Linux Importer Affected by VCID-ykmk-ymk1-b3a6 https://security.archlinux.org/AVG-2335 38.0.0
2026-04-01T18:26:35.905226+00:00 Arch Linux Importer Affected by VCID-ss7h-4jqj-rycp https://security.archlinux.org/AVG-2335 38.0.0