VDB
CVE-2026-2973
CVE-2026-2973
PUBLISHED
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
EPSS 0.04% · 13.1th percentile
Risk Scores
EPSS Score
0.04%
13.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 17.7.0, 18.10.0, 18.9.0 |
Timeline
- Mar 25, 2026 CVE Published
- Mar 25, 2026 Coalition ESS Score
- Mar 25, 2026 PoC Published
- Mar 25, 2026 PoC Published
- Mar 25, 2026 PoC Published
- Mar 25, 2026 PoC Published
- Mar 26, 2026 PoC Published
- Mar 26, 2026 PoC Published
- Mar 26, 2026 CVE Updated
- Mar 27, 2026 PoC Published
- Mar 29, 2026 Security Advisory
- May 18, 2026 EPSS Score