Multiple vulnerabilities have been identified in GitLab CE and EE. A remote attacker could exploit these vulnerabilities to trigger a denial of service condition and bypass security restrictions. Users are advised to apply the vendor-provided fixes.
Multiple vulnerabilities were identified in GitLab. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and security restriction bypass on the targeted system. Impact Denial of Service Security Restriction Bypass System / Technologies affected GitLab Community Edition (CE) versions prior to 18.8.2, 18.7.2, 18.6.4 GitLab Enterprise Edition (EE) versions prior to 18.8.2, 18.7.2, 18.6.4 Solutions Before installation of the software, please visit the vendor web-site for more details. Apply fixes issued by the vendor: https://about.gitlab.com/releases/2026/01/21/patch-release-gitlab-18-8-2-released/