Gitlab -- vulnerabilities

2026-03-11 · CVE-2026-1090, CVE-2026-1069, CVE-2025-13929, CVE-2025-14513, CVE-2025-13690, CVE-2025-12576, CVE-2026-3848, CVE-2025-12555, CVE-2026-0602, CVE-2026-1732, CVE-2026-1663, CVE-2026-1230, CVE-2025-12704, CVE-2025-12697 · VuXML entry

Gitlab reports: Cross-site Scripting issue in Markdown placeholder processing impacts GitLab CE/EE Denial of Service issue in GraphQL API impacts GitLab CE/EE Denial of Service issue in repository archive endpoint impacts GitLab CE/EE Denial of Service issue in protected branches API impacts GitLab CE/EE Denial of Service issue in webhook custom headers impacts GitLab CE/EE Denial of Service issue in webhook …

Affected versions

• gitlab-ce, gitlab-ee >= 18.9.0 < 18.9.2; >= 18.8.0 < 18.8.6; >= 1.0.0 < 18.7.6

By system

0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.