Priority LOW 20
GitLab has remediated an issue in GitLab EE affecting all versions from 16.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstances could have allowed an authenticated user to have a…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00274 · Published 2026-04-08 · Fixed in 18.8.9, 18.9.5 +1 CWE-862
Priority MEDIUM 40
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an unauthenticated user to cause denial of service by se…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00588 · Published 2026-04-08 · Fixed in 18.8.9, 18.9.5 +1 CWE-1284
Priority HIGH 72
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an unauthenticated user to cause denial of service due…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00562 · Published 2026-04-08 · Fixed in 18.8.9, 18.9.5 +1 CWE-1284
Priority LOW 29
GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user to cause denial of service to the Git…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00428 · Published 2026-04-08 · Fixed in 18.8.9, 18.9.5 +1 CWE-1284
Priority LOW 26
GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have allowed an authenticated user to leak IP…
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00436 · Published 2026-04-08 · Fixed in 18.8.9, 18.9.5 +1 CWE-94
Priority MEDIUM 53
GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with developer-role permissions to mo…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00323 · Published 2026-04-08 · Fixed in 18.8.9, 18.9.5 +1 CWE-863
Priority LOW 20
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user to access confidential issues assi…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0032 · Published 2026-04-08 · Fixed in 18.8.9, 18.9.5 +1 CWE-639
Priority LOW 20
GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstances could have allowed an authenticated user with audi…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00339 · Published 2026-04-08 · Fixed in 18.8.9, 18.9.5 +1 CWE-863
Priority LOW 24
GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated use…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0029 · Published 2026-04-08 · Fixed in 18.8.9, 18.9.5 +1 CWE-79
Priority LOW 14
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with custom role permissions to de…
CVSS 3.1LOW 2.7· Network · High privileges · No interaction · EPSS 0.00361 · Published 2026-04-08 · Fixed in 18.8.9, 18.9.5 +1 CWE-862
Priority LOW 37
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user to invoke unintended server-side…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00433 · Published 2026-04-08 · Fixed in 18.8.9, 18.9.5 +1 CWE-749