Gitlab -- vulnerabilities

2026-02-11 · CVE-2025-7659, CVE-2025-8099, CVE-2026-0958, CVE-2025-14560, CVE-2026-0595, CVE-2026-1458, CVE-2026-1456, CVE-2026-1387, CVE-2025-12575, CVE-2026-1094, CVE-2025-12073, CVE-2026-1080, CVE-2025-14592, CVE-2026-1282, CVE-2025-14594 · VuXML entry

Gitlab reports: Incomplete Validation issue in Web IDE impacts GitLab CE/EE Denial of Service issue in GraphQL introspection impacts GitLab CE/EE Denial of Service issue in JSON validation middleware impacts GitLab CE/EE Cross-site Scripting issue in Code Flow impacts GitLab CE/EE HTML Injection issue in test case titles impacts GitLab CE/EE Denial of Service issue in Markdown processor impacts GitLab CE/EE Denial …

Affected versions

• gitlab-ce, gitlab-ee >= 18.8.0 < 18.8.4; >= 18.7.0 < 18.7.4; >= 8.0.0 < 18.6.6

By system

0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.