Runner (Gitlab) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 336 known versions, newest CVE from 2023-01-17. Vendor: Gitlab.

CVEs of Runner

• CVE-2022-2251 - CVSS 8 (high), 2023-01-17: Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user…
• CVE-2020-13327 - CVSS 7.5 (high), 2020-10-22: An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 before 13.3.7, all…
• CVE-2020-13295 - CVSS 8.8 (high), 2020-08-10: For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF.