GitLab
GitLab Patch Release: 18.7.1, 18.6.3, 18.5.5
patch-release-gitlab-18-7-1-released Jan 7, 2026 Source: Vendor
Imported by the GitLab patch release catcher from https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-7-1-released/. 7 CVE sections listed. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-7-1-released/
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
6 lines
Showing 1–6 of 6
CVE-2025-9222
BR2026-0000-009566
unclaimed
Stored Cross-site Scripting issue in GitLab Flavored Markdown placeholders impacts GitLab CE/EE
Credited as yvvdwf
CVE-2025-13761
BR2026-0000-009567
unclaimed
Cross-site Scripting issue in Web IDE impacts GitLab CE/EE
Credited as joaxcar
CVE-2025-13781
BR2026-0000-009568
unclaimed
Missing Authorization issue in AI GraphQL mutation impacts GitLab EE
Credited as pwnie
CVE-2025-10569
BR2026-0000-009569
unclaimed
Denial of Service issue in import functionality impacts GitLab CE/EE
Credited as a92847865
CVE-2025-11246
BR2026-0000-009570
unclaimed
Insufficient Access Control Granularity issue in GraphQL runnerUpdate mutation impacts GitLab CE/EE
Credited as pwnie
CVE-2025-3950
BR2026-0000-009571
unclaimed
Information Disclosure issue in Mermaid diagram rendering impacts GitLab CE/EE
Credited as rogerace