Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitLab 18.2.8, 18.3.4, 18.4.2 Clear all filters
TI-2025-09183 CVE-2025-10004 · GHSA-5p65-6rwr-377w

Allocation of Resources Without Limits or Throttling in GitLab

Priority MEDIUM 40

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.12 to 18.2.8, 18.3 to 18.3.4, and 18.4 to 18.4.2 that could make the GitLab instance unresponsive or severely degraded by sending crafted Grap…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00532 Published 2025-10-09 Fixed in 18.2.8, 18.3.4 +1 CWE-770
TI-2025-02563 CVE-2025-2934 · GHSA-j56p-cx78-v9ch

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 30

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 5.2 prior to 18.2.8, 18.3 prior to 18.3.4, and 18.4 prior to 18.4.2 that could have allowed an authenticated attacker to create a denial of servi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00542 Published 2025-10-09 Fixed in 18.2.8, 18.3.4 +1 CWE-770