Gitlab -- vulnerabilities

2025-07-24 · CVE-2025-4700, CVE-2025-4439, CVE-2025-7001, CVE-2025-4976, CVE-2025-0765, CVE-2025-1299 · VuXML entry

Gitlab reports: Cross-site scripting issue impacts Kubernetes Proxy in GitLab CE/EE Cross-site scripting issue impacts Kubernetes Proxy in GitLab CE/EE using CDNs Exposure of Sensitive Information to an Unauthorized Actor issue impacts GitLab CE/EE Improper Access Control issue impacts GitLab EE Exposure of Sensitive Information to an Unauthorized Actor issue impacts GitLab CE/EE Improper Access Control issue …

Affected versions

• gitlab-ce, gitlab-ee >= 18.2.0 < 18.2.1; >= 18.1.0 < 18.1.3; >= 15.0.0 < 18.0.5

By system

0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.