Gitlab Runner (Gitlab) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2023-01-17. Vendor: Gitlab.

CVEs of Gitlab Runner

• CVE-2022-2251 - CVSS 8 (high), 2023-01-17: Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user…
• CVE-2021-39947 - CVSS 7.5 (high), 2022-06-06: In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the file descriptor 0…
• CVE-2021-39939 - CVSS 6.5 (medium), 2021-12-13: An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before 14.3.6, all versions starting from 14.4…
• CVE-2020-13327 - CVSS 7.5 (high), 2020-10-22: An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 before 13.3.7, all…
• CVE-2020-13347 - CVSS 9.1 (critical), 2020-10-07: A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured on a Windows…
• CVE-2020-13295 - CVSS 8.8 (high), 2020-08-10: For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF.