Gitlab -- Vulnerabilities

2025-06-12 · CVE-2025-4278, CVE-2025-2254, CVE-2025-5121, CVE-2025-0673, CVE-2025-1516, CVE-2025-1478, CVE-2024-9512, CVE-2025-5996, CVE-2025-5195, CVE-2025-5982 · VuXML entry

Gitlab reports: HTML injection impacts GitLab CE/EE Cross-site scripting issue impacts GitLab CE/EE Missing authorization issue impacts GitLab Ultimate EE Denial of Service impacts GitLab CE/EE Denial of Service via unbounded Webhook token names impacts GitLab CE/EE Denial of Service via unbounded Board Names impacts GitLab CE/EE Information disclosure issue impacts GitLab CE/EE Denial of Service (DoS) via …

Affected versions

• gitlab-ce, gitlab-ee >= 18.0.0 < 18.0.2; >= 17.11.0 < 17.11.4; >= 2.1.0 < 17.10.8

By system

0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.