GitLab
GitLab Patch Release: 18.0.2, 17.11.4, 17.10.8
patch-release-gitlab-18-0-2-released Jun 11, 2025 Source: Vendor
Imported by the GitLab patch release catcher from https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-0-2-released/. 10 CVE sections listed. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-0-2-released/
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
9 lines
Showing 1–9 of 9
CVE-2025-4278
BR2025-0000-009837
unclaimed
HTML injection impacts GitLab CE/EE
Credited as joaxcar
CVE-2025-2254
BR2025-0000-009838
unclaimed
Cross-site scripting issue impacts GitLab CE/EE
Credited as yvvdwf
CVE-2025-5121
BR2025-0000-009839
unclaimed
Missing authorization issue impacts GitLab Ultimate EE
Credited as jean_d-ou
CVE-2025-0673
BR2025-0000-009840
unclaimed
Denial of Service impacts GitLab CE/EE
Credited as sim4n6
CVE-2025-1516
BR2025-0000-009841
unclaimed
Denial of Service via unbounded Webhook token names impacts GitLab CE/EE
Credited as pwnie
CVE-2025-1478
BR2025-0000-009842
unclaimed
Denial of Service via unbounded Board Names impacts GitLab CE/EE
Credited as pwnie
CVE-2024-9512
BR2025-0000-009843
unclaimed
Information disclosure issue impacts GitLab CE/EE
Credited as hdtran
CVE-2025-5996
BR2025-0000-009844
unclaimed
Denial of Service (DoS) via uncontrolled HTTP Response Processing impacts GitLab CE/EE
Credited as joaxcar
CVE-2025-5996
BR2025-0000-009845
unclaimed
Denial of Service (DoS) via uncontrolled HTTP Response Processing impacts GitLab CE/EE
Credited as pwnie