Gitlab -- vulnerabilities

2026-02-26 · CVE-2026-0752, CVE-2025-14511, CVE-2026-1662, CVE-2026-1388, CVE-2026-2845, CVE-2025-3525, CVE-2026-1725, CVE-2026-1747, CVE-2025-14103 · VuXML entry

Gitlab reports: Cross-site Scripting issue in Mermaid sandbox impacts GitLab CE/EE Denial of Service issue in container registry impacts GitLab CE/EE Denial of Service issue in Jira events endpoint impacts GitLab CE/EE Regular Expression Denial of Service issue in GitLab merge requests impacts GitLab CE/EE Missing rate limit in Bitbucket Server importer impacts GitLab CE/EE Denial of Service issue in CI trigger API …

Affected versions

• gitlab-ce, gitlab-ee >= 18.9.0 < 18.9.1; >= 18.8.0 < 18.8.5; >= 9.0.0 < 18.7.5

By system

0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.