Search for packages
Package details: pkg:alpm/archlinux/gitlab@14.0.1-1
purl pkg:alpm/archlinux/gitlab@14.0.1-1
Next non-vulnerable version 14.0.3-1
Latest non-vulnerable version 15.2.1-1
Risk 4.0
Vulnerabilities affecting this package (12)
Vulnerability Summary Fixed by
VCID-15af-kq97-aaac
Aliases:
CVE-2021-22233
An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to read project details
14.0.3-1
Affected by 0 other vulnerabilities.
VCID-1g9y-qjj5-aaar
Aliases:
CVE-2021-22226
Under certain conditions, some users were able to push to protected branches that were restricted to deploy keys in GitLab CE/EE since version 13.9
14.0.3-1
Affected by 0 other vulnerabilities.
VCID-21h3-u6rv-aaaa
Aliases:
CVE-2021-22230
Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability affects GitLab CE/EE 9.3 and later through 13.11.6, 13.12.6, and 14.0.2.
14.0.3-1
Affected by 0 other vulnerabilities.
VCID-4cug-sfnv-aaak
Aliases:
CVE-2021-22223
Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feature flag name to PUT requests on behalf of other users via clicking on a link
14.0.3-1
Affected by 0 other vulnerabilities.
VCID-9j2y-dvjk-aaaq
Aliases:
CVE-2021-22228
An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13.12.6, and all versions starting from 14.0 before 14.0.2. Improper access control allows unauthorised users to access project details using Graphql.
14.0.3-1
Affected by 0 other vulnerabilities.
VCID-b7x6-2n2p-aaae
Aliases:
CVE-2021-22227
A reflected cross-site script vulnerability in GitLab before versions 13.11.6, 13.12.6 and 14.0.2 allowed an attacker to send a malicious link to a victim and trigger actions on their behalf if they clicked it
14.0.3-1
Affected by 0 other vulnerabilities.
VCID-gmf4-gcd5-aaab
Aliases:
CVE-2021-31799
GHSA-ggxm-pgc9-g7fp
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.
14.0.3-1
Affected by 0 other vulnerabilities.
VCID-jqfc-qtw3-aaae
Aliases:
CVE-2021-22224
A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call mutations as the victim
14.0.3-1
Affected by 0 other vulnerabilities.
VCID-kxmu-p5zt-aaaf
Aliases:
CVE-2021-22225
Insufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted markdown
14.0.3-1
Affected by 0 other vulnerabilities.
VCID-p599-h6y2-aaaf
Aliases:
CVE-2021-22229
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8. Under a special condition it was possible to access data of an internal repository through project fork done by a project member.
14.0.3-1
Affected by 0 other vulnerabilities.
VCID-rgud-smfu-aaaf
Aliases:
CVE-2021-22232
HTML injection was possible via the full name field before versions 13.11.6, 13.12.6, and 14.0.2 in GitLab CE
14.0.3-1
Affected by 0 other vulnerabilities.
VCID-vqc6-d529-aaas
Aliases:
CVE-2021-22231
A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows attacker to reject access to their profile page via using a specially crafted username.
14.0.3-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:32.454247+00:00 Arch Linux Importer Affected by VCID-15af-kq97-aaac https://security.archlinux.org/AVG-2137 36.0.0
2025-03-28T07:45:34.740732+00:00 Arch Linux Importer Affected by VCID-4cug-sfnv-aaak https://security.archlinux.org/AVG-2125 36.0.0
2025-03-28T07:45:34.721680+00:00 Arch Linux Importer Affected by VCID-jqfc-qtw3-aaae https://security.archlinux.org/AVG-2125 36.0.0
2025-03-28T07:45:34.702676+00:00 Arch Linux Importer Affected by VCID-kxmu-p5zt-aaaf https://security.archlinux.org/AVG-2125 36.0.0
2025-03-28T07:45:34.683557+00:00 Arch Linux Importer Affected by VCID-1g9y-qjj5-aaar https://security.archlinux.org/AVG-2125 36.0.0
2025-03-28T07:45:34.664436+00:00 Arch Linux Importer Affected by VCID-b7x6-2n2p-aaae https://security.archlinux.org/AVG-2125 36.0.0
2025-03-28T07:45:34.646386+00:00 Arch Linux Importer Affected by VCID-9j2y-dvjk-aaaq https://security.archlinux.org/AVG-2125 36.0.0
2025-03-28T07:45:34.627238+00:00 Arch Linux Importer Affected by VCID-p599-h6y2-aaaf https://security.archlinux.org/AVG-2125 36.0.0
2025-03-28T07:45:34.608177+00:00 Arch Linux Importer Affected by VCID-21h3-u6rv-aaaa https://security.archlinux.org/AVG-2125 36.0.0
2025-03-28T07:45:34.589882+00:00 Arch Linux Importer Affected by VCID-vqc6-d529-aaas https://security.archlinux.org/AVG-2125 36.0.0
2025-03-28T07:45:34.571742+00:00 Arch Linux Importer Affected by VCID-rgud-smfu-aaaf https://security.archlinux.org/AVG-2125 36.0.0
2025-03-28T07:45:34.552713+00:00 Arch Linux Importer Affected by VCID-gmf4-gcd5-aaab https://security.archlinux.org/AVG-2125 36.0.0
2024-09-18T02:01:50.488740+00:00 Arch Linux Importer Affected by VCID-15af-kq97-aaac https://security.archlinux.org/AVG-2137 34.0.1
2024-09-18T02:00:32.297206+00:00 Arch Linux Importer Affected by VCID-4cug-sfnv-aaak https://security.archlinux.org/AVG-2125 34.0.1
2024-09-18T02:00:32.271507+00:00 Arch Linux Importer Affected by VCID-jqfc-qtw3-aaae https://security.archlinux.org/AVG-2125 34.0.1
2024-09-18T02:00:32.250306+00:00 Arch Linux Importer Affected by VCID-kxmu-p5zt-aaaf https://security.archlinux.org/AVG-2125 34.0.1
2024-09-18T02:00:32.229128+00:00 Arch Linux Importer Affected by VCID-1g9y-qjj5-aaar https://security.archlinux.org/AVG-2125 34.0.1
2024-09-18T02:00:32.205256+00:00 Arch Linux Importer Affected by VCID-b7x6-2n2p-aaae https://security.archlinux.org/AVG-2125 34.0.1
2024-09-18T02:00:32.179021+00:00 Arch Linux Importer Affected by VCID-9j2y-dvjk-aaaq https://security.archlinux.org/AVG-2125 34.0.1
2024-09-18T02:00:32.152840+00:00 Arch Linux Importer Affected by VCID-p599-h6y2-aaaf https://security.archlinux.org/AVG-2125 34.0.1
2024-09-18T02:00:32.125926+00:00 Arch Linux Importer Affected by VCID-21h3-u6rv-aaaa https://security.archlinux.org/AVG-2125 34.0.1
2024-09-18T02:00:32.099542+00:00 Arch Linux Importer Affected by VCID-vqc6-d529-aaas https://security.archlinux.org/AVG-2125 34.0.1
2024-09-18T02:00:32.071912+00:00 Arch Linux Importer Affected by VCID-rgud-smfu-aaaf https://security.archlinux.org/AVG-2125 34.0.1
2024-09-18T02:00:32.044504+00:00 Arch Linux Importer Affected by VCID-gmf4-gcd5-aaab https://security.archlinux.org/AVG-2125 34.0.1
2024-01-12T23:41:40.964213+00:00 Arch Linux Importer Affected by VCID-4cug-sfnv-aaak https://security.archlinux.org/AVG-2125 34.0.0rc2
2024-01-12T23:41:40.942002+00:00 Arch Linux Importer Affected by VCID-jqfc-qtw3-aaae https://security.archlinux.org/AVG-2125 34.0.0rc2
2024-01-12T23:41:40.920322+00:00 Arch Linux Importer Affected by VCID-kxmu-p5zt-aaaf https://security.archlinux.org/AVG-2125 34.0.0rc2
2024-01-12T23:41:40.898384+00:00 Arch Linux Importer Affected by VCID-1g9y-qjj5-aaar https://security.archlinux.org/AVG-2125 34.0.0rc2
2024-01-12T23:41:40.876467+00:00 Arch Linux Importer Affected by VCID-b7x6-2n2p-aaae https://security.archlinux.org/AVG-2125 34.0.0rc2
2024-01-12T23:41:40.854419+00:00 Arch Linux Importer Affected by VCID-9j2y-dvjk-aaaq https://security.archlinux.org/AVG-2125 34.0.0rc2
2024-01-12T23:41:40.832556+00:00 Arch Linux Importer Affected by VCID-p599-h6y2-aaaf https://security.archlinux.org/AVG-2125 34.0.0rc2
2024-01-12T23:41:40.810711+00:00 Arch Linux Importer Affected by VCID-21h3-u6rv-aaaa https://security.archlinux.org/AVG-2125 34.0.0rc2
2024-01-12T23:41:40.788711+00:00 Arch Linux Importer Affected by VCID-vqc6-d529-aaas https://security.archlinux.org/AVG-2125 34.0.0rc2
2024-01-12T23:41:40.766705+00:00 Arch Linux Importer Affected by VCID-rgud-smfu-aaaf https://security.archlinux.org/AVG-2125 34.0.0rc2
2024-01-12T23:41:40.744746+00:00 Arch Linux Importer Affected by VCID-gmf4-gcd5-aaab https://security.archlinux.org/AVG-2125 34.0.0rc2
2024-01-03T22:27:55.358806+00:00 Arch Linux Importer Affected by VCID-15af-kq97-aaac https://security.archlinux.org/AVG-2137 34.0.0rc1
2024-01-03T22:26:48.610495+00:00 Arch Linux Importer Affected by VCID-4cug-sfnv-aaak https://security.archlinux.org/AVG-2125 34.0.0rc1
2024-01-03T22:26:48.586164+00:00 Arch Linux Importer Affected by VCID-jqfc-qtw3-aaae https://security.archlinux.org/AVG-2125 34.0.0rc1
2024-01-03T22:26:48.560130+00:00 Arch Linux Importer Affected by VCID-kxmu-p5zt-aaaf https://security.archlinux.org/AVG-2125 34.0.0rc1
2024-01-03T22:26:48.533853+00:00 Arch Linux Importer Affected by VCID-1g9y-qjj5-aaar https://security.archlinux.org/AVG-2125 34.0.0rc1
2024-01-03T22:26:48.512327+00:00 Arch Linux Importer Affected by VCID-b7x6-2n2p-aaae https://security.archlinux.org/AVG-2125 34.0.0rc1
2024-01-03T22:26:48.490649+00:00 Arch Linux Importer Affected by VCID-9j2y-dvjk-aaaq https://security.archlinux.org/AVG-2125 34.0.0rc1
2024-01-03T22:26:48.468957+00:00 Arch Linux Importer Affected by VCID-p599-h6y2-aaaf https://security.archlinux.org/AVG-2125 34.0.0rc1
2024-01-03T22:26:48.447293+00:00 Arch Linux Importer Affected by VCID-21h3-u6rv-aaaa https://security.archlinux.org/AVG-2125 34.0.0rc1
2024-01-03T22:26:48.425639+00:00 Arch Linux Importer Affected by VCID-vqc6-d529-aaas https://security.archlinux.org/AVG-2125 34.0.0rc1
2024-01-03T22:26:48.391718+00:00 Arch Linux Importer Affected by VCID-rgud-smfu-aaaf https://security.archlinux.org/AVG-2125 34.0.0rc1
2024-01-03T22:26:48.360764+00:00 Arch Linux Importer Affected by VCID-gmf4-gcd5-aaab https://security.archlinux.org/AVG-2125 34.0.0rc1