CVE-2021-22220: GitLab

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue has been discovered in GitLab affecting all versions starting with 13.10. GitLab was vulnerable to a stored XSS in blob viewer of notebooks.

Affected products

• GitLab GitLab: from 13.10, up to and including 13.10.5; from 13.11, up to and including 13.11.5; from 13.12, up to and including 13.12.2

Published 2021-06-08. Last modified 2026-06-17.