Skip to content
OpenAdvisories
High NCSC-2026-0037 5 CVEs

Kwetsbaarheden verholpen in GitLab Community Edition en Enterprise Edition

Published Jan 22, 2026 · Updated Jan 22, 2026 · nl

Vendor: GitLab Product: GitLab

Summary

GitLab heeft kwetsbaarheden verholpen in Community Edition (CE) en Enterprise Edition (EE) versies voor 18.6.4, 18.7.2, en 18.8.2.

Details

Interpretaties
Kwaadwillenden kunnen de kwetsbaarheden misbruiken om een Denial-of-Service (DoS) te veroorzaken, of om door het omzeilen van beveiligingsmaatregelen mogelijk toegang krijgen tot gevoelige gegevens.

Oplossingen
GitLab heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 5

  • High 7.5
    CVE-2025-13927

    Allocation of Resources Without Limits or Throttling in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.9 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to create a denial of service condition by sending crafted requests with …

    GitLab GitLab gitlab-runner-18.8 gitlab-runner-helper-18.8 Web / CMS Wolfi
  • High 7.5
    CVE-2025-13928

    Incorrect Authorization in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to cause a denial of service condition by exploiting incorrect authorizat…

    GitLab GitLab gitlab gitlab-runner-18.8 Web / CMS Ubuntu Wolfi
  • High 7.4
    CVE-2026-0723

    Unchecked Return Value in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an individual with existing knowledge of a victim's credential ID to bypass two-factor authentica…

    GitLab GitLab gitlab gitlab-runner-18.8 Web / CMS Ubuntu Wolfi
  • Medium 6.5
    CVE-2025-13335

    Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that under certain circumstances could have allowed an authenticated user to create a denial of service condition by conf…

    GitLab GitLab gitlab gitlab-runner-18.8 Web / CMS Ubuntu Wolfi
  • Medium 5.3
    CVE-2026-1102

    Allocation of Resources Without Limits or Throttling in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to create a denial of service condition by sending repeated malformed SSH…

    GitLab GitLab gitlab gitlab-runner-18.8 Web / CMS Ubuntu Wolfi

Revision history

  1. #1.0.0

    Initiele versie

References

  • Reference
    https://about.gitlab.com/releases/2026/01/21/patch-release-gitlab-18-8-2-released/