Skip to content
OpenAdvisories
High · 8.7 CVE-2025-8279 EUVD-2025-22905GHSA-qrpw-3vx7-g7g2

Missing Authentication for Critical Function in GitLab Language Server

Published Jul 28, 2025 · Updated Jul 28, 2025 · Assigned by GitLab

Vendor: GitLab Product: GitLab Language Server Category: Web / CMS

Description

Insufficient input validation within GitLab Language Server 7.6.0 and later before 7.30.0 allows arbitrary GraphQL query execution

Affected products

VendorProductAffectedFixed
GitLab GitLab Language Server 7.6.0 – < 7.30.0 7.30.0

References