3.0.2

DATE	CVE	VULNERABILITY TITLE	RISK
2017-05-04	CVE-2017-8778	Cross-site Scripting vulnerability in Gitlab GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document. network gitlab CWE-79	4.3
2014-05-12	CVE-2013-4581	Code Injection vulnerability in Gitlab and Gitlab-Shell GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote attackers to execute arbitrary code via a crafted change using SSH. network gitlab CWE-94	6.8
2014-05-12	CVE-2013-4580	Improper Authentication vulnerability in Gitlab GitLab before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1, when using a MySQL backend, allows remote attackers to impersonate arbitrary users and bypass authentication via unspecified API calls. network gitlab CWE-287	6.8