GitLab
GitLab Patch Release: 18.5.1, 18.4.3, 18.3.5
patch-release-gitlab-18-5-1-released Oct 22, 2025 Source: Vendor
Imported by the GitLab patch release catcher from https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-5-1-released/. 7 CVE sections listed. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-5-1-released/
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
5 lines
Showing 1–5 of 5
CVE-2025-11702
BR2025-0000-009614
unclaimed
Improper access control issue in runner API impacts GitLab EE
Credited as iamgk808
CVE-2025-10497
BR2025-0000-009615
unclaimed
Denial of service issue in event collection impacts GitLab CE/EE
Credited as a92847865
CVE-2025-11447
BR2025-0000-009616
unclaimed
Denial of service issue in JSON validation impacts GitLab CE/EE
Credited as a92847865
CVE-2025-6601
BR2025-0000-009617
unclaimed
Business logic error issue in group memberships impacts GitLab EE
Credited as mateuszek
CVE-2025-6601
BR2025-0000-009618
unclaimed
Business logic error issue in group memberships impacts GitLab EE
Credited as rhidayahh