BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

GitLab

GitLab Patch Release: 18.2.1, 18.1.3, 18.0.5

patch-release-gitlab-18-2-1-released Jul 23, 2025 Source: Vendor

Imported by the GitLab patch release catcher from https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-2-1-released/. 6 CVE sections listed. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-2-1-released/
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

6 lines
All 6 CVEs 6 Additional recognition 0 Unclaimed only
Showing 1–6 of 6
CVE-2025-4700 BR2025-0000-009752 unclaimed
Cross-site scripting issue impacts Kubernetes Proxy in GitLab CE/EE
Credited as joaxcar
CVE-2025-4439 BR2025-0000-009753 unclaimed
Cross-site scripting issue impacts Kubernetes Proxy in GitLab CE/EE using CDNs
Credited as joaxcar
CVE-2025-7001 BR2025-0000-009754 unclaimed
Exposure of Sensitive Information to an Unauthorized Actor issue impacts GitLab CE/EE
Credited as iamgk808
CVE-2025-4976 BR2025-0000-009755 unclaimed
Improper Access Control issue impacts GitLab EE
Credited as rogerace
CVE-2025-0765 BR2025-0000-009756 unclaimed
Exposure of Sensitive Information to an Unauthorized Actor issue impacts GitLab CE/EE
Credited as iamgk808
CVE-2025-1299 BR2025-0000-009757 unclaimed
Improper Access Control issue impacts GitLab CE/EE
Credited as pwnie