Skip to content

Vulnerabilities of GitLab GitLab Runner

Is your version affected?

CVE Summary Score Published
CVE-2022-2251 Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and… 4.8 Medium Jan 17, 2023
CVE-2021-39947 In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2… 5.3 Medium Jun 6, 2022
CVE-2021-39939 An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before… 6.5 Medium Dec 13, 2021
CVE-2020-13327 An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions… 6.0 Medium Oct 22, 2020
CVE-2020-13347 A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1 9.1 Critical Oct 7, 2020
CVE-2020-13295 For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is… 5.4 Medium Aug 10, 2020

Other GitLab products