Skip to content
OpenAdvisories
Medium WID-SEC-2026-0178 5 CVEs

GitLab: Mehrere Schwachstellen

Published Jan 20, 2026 · Updated Jan 22, 2026 · Revision 2 · de-DE

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsmaßnahmen zu umgehen.

Product

GitLab ist eine Webanwendung zur Versionsverwaltung für Softwareprojekte auf Basis von git.

Vulnerabilities 5

  • High 7.5
    CVE-2025-13927

    Allocation of Resources Without Limits or Throttling in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.9 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to create a denial of service condition by sending crafted requests with …

    GitLab GitLab gitlab-runner-18.8 gitlab-runner-helper-18.8 Web / CMS Wolfi
  • High 7.5
    CVE-2025-13928

    Incorrect Authorization in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to cause a denial of service condition by exploiting incorrect authorizat…

    GitLab GitLab gitlab gitlab-runner-18.8 Web / CMS Ubuntu Wolfi
  • High 7.4
    CVE-2026-0723

    Unchecked Return Value in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an individual with existing knowledge of a victim's credential ID to bypass two-factor authentica…

    GitLab GitLab gitlab gitlab-runner-18.8 Web / CMS Ubuntu Wolfi
  • Medium 6.5
    CVE-2025-13335

    Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that under certain circumstances could have allowed an authenticated user to create a denial of service condition by conf…

    GitLab GitLab gitlab gitlab-runner-18.8 Web / CMS Ubuntu Wolfi
  • Medium 5.3
    CVE-2026-1102

    Allocation of Resources Without Limits or Throttling in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to create a denial of service condition by sending repeated malformed SSH…

    GitLab GitLab gitlab gitlab-runner-18.8 Web / CMS Ubuntu Wolfi

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-4152, EUVD-2026-4151, EUVD-2026-4149, EUVD-2026-4147, EUVD-2026-4162

  2. #1

    Initiale Fassung

References