BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

GitLab

GitLab Patch Release: 18.6.2, 18.5.4, 18.4.6

patch-release-gitlab-18-6-2-released Dec 10, 2025 Source: Vendor

Imported by the GitLab patch release catcher from https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-6-2-released/. 10 CVE sections listed. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-6-2-released/
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

7 lines
All 7 CVEs 7 Additional recognition 0 Unclaimed only
Showing 1–7 of 7
CVE-2025-12716 BR2025-0000-009572 unclaimed
Cross-site scripting issue in Wiki impacts GitLab CE/EE
Credited as yvvdwf
CVE-2025-12029 BR2025-0000-009573 unclaimed
Cross-site scripting issue in Swagger UI impacts GitLab CE/EE
Credited as x0abcd_
CVE-2025-8405 BR2025-0000-009574 unclaimed
Improper encoding in vulnerability reports impacts GitLab CE/EE
Credited as yvvdwf
CVE-2025-12562 BR2025-0000-009575 unclaimed
Denial of service issue in GraphQL endpoints impacts GitLab CE/EE
Credited as joaxcar
CVE-2025-11984 BR2025-0000-009576 unclaimed
Authentication bypass issue for WebAuthn users impacts GitLab CE/EE
Credited as jcarre
CVE-2025-11247 BR2025-0000-009577 unclaimed
Information disclosure issue in compliance frameworks impacts GitLab EE
Credited as weasterhacker
CVE-2025-12734 BR2025-0000-009578 unclaimed
HTML injection issue in merge request titles impacts GitLab CE/EE
Credited as joaxcar