BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

GitLab

GitLab Patch Release: 18.4.1, 18.3.3, 18.2.7

patch-release-gitlab-18-4-1-released Sep 25, 2025 Source: Vendor

Imported by the GitLab patch release catcher from https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-4-1-released/. 10 CVE sections listed. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-4-1-released/
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

5 lines
All 5 CVEs 5 Additional recognition 0 Unclaimed only
Showing 1–5 of 5
CVE-2025-9642 BR2025-0000-009649 unclaimed
Cross-site scripting issue in Script Gadgets impacts GitLab CE/EE
Credited as joaxcar
CVE-2025-8014 BR2025-0000-009650 unclaimed
Denial of Service issue bypassing query complexity limits impacts GitLab CE/EE
Credited as foxribeye
CVE-2025-9958 BR2025-0000-009651 unclaimed
Information disclosure issue in virtual registry configuration for low privileged users impacts GitLab CE/EE
Credited as joaxcar
CVE-2025-7691 BR2025-0000-009652 unclaimed
Privilege Escalation issue from within the Developer role impacts GitLab EE
Credited as rogerace
CVE-2025-5069 BR2025-0000-009653 unclaimed
Incorrect ownership assignment via Move Issue drop-down impacts GitLab CE/EE
Credited as foxribeye