Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: GitLab 18.6.4, 18.7.2, 18.8.2 Clear all filters
TI-2025-12729 CVE-2025-13928 · GHSA-rf7g-f56c-v6w4

Incorrect Authorization in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to cause a denial of service condi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00699 Published 2026-01-22 Fixed in 18.6.4, 18.7.2 +1 CWE-863
TI-2025-12728 CVE-2025-13927 · GHSA-4v3f-ffrw-xcx6

Allocation of Resources Without Limits or Throttling in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.9 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to create a denial of service cond…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00831 Published 2026-01-22 Fixed in 18.6.4, 18.7.2 +1 CWE-770
TI-2026-00510 CVE-2026-0723 · GHSA-gr75-mcwq-hxv5

Unchecked Return Value in GitLab

Priority LOW 36

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an individual with existing knowledge of a victim's creden…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01042 Published 2026-01-22 Fixed in 18.6.4, 18.7.2 +1 CWE-252
TI-2026-00831 CVE-2026-1102 · GHSA-3rr2-xxqc-95fc

Allocation of Resources Without Limits or Throttling in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to create a denial of service cond…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00585 Published 2026-01-22 Fixed in 18.6.4, 18.7.2 +1 CWE-770
TI-2025-12194 CVE-2025-13335 · GHSA-r8f4-mx7h-29jp

Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab

Priority LOW 30

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that under certain circumstances could have allowed an authenticated user to creat…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00566 Published 2026-01-22 Fixed in 18.6.4, 18.7.2 +1 CWE-835