HIGH8.8CVE-2020-13295For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF. >= 1.0.0, < 13.0.12, >= 13.1.0, < 13.1.6, >= 13.2.0, < 13.2.3
HIGH8.0CVE-2022-2251Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5… from 0, < 15.3.5, >= 15.4.0, < 15.4.4, >= 15.5.0, < 15.5.2
HIGH7.5CVE-2020-13327An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0… >= 13.2.0, < 13.2.10, >= 13.3.0, < 13.3.7, >= 13.4.0, < 13.4.2