Gitlab -- vulnerabilities

2026-01-21 · CVE-2025-13927, CVE-2025-13928, CVE-2026-0723, CVE-2025-13335, CVE-2026-1102 · VuXML entry

Gitlab reports: Denial of Service issue in Jira Connect integration impacts GitLab CE/EE Incorrect Authorization issue in Releases API impacts GitLab CE/EE Unchecked Return Value issue in authentication services impacts GitLab CE/EE Infinite Loop issue in Wiki redirects impacts GitLab CE/EE Denial of Service issue in API endpoint impacts GitLab CE/EE

Affected versions

• gitlab-ce, gitlab-ee >= 18.8.0 < 18.8.2; >= 18.7.0 < 18.7.2; >= 11.9.0 < 18.6.4

By system

0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.