An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated attackers to create a DoS condition by sending crafted GraphQL requests.
2025-06-26T06:15:23.307
2025-08-12T14:42:56.010
Analyzed
CVSSv3.1: 6.5 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | gitlab | gitlab | < 17.11.5 | Yes |
| Application | gitlab | gitlab | < 17.11.5 | Yes |
| Application | gitlab | gitlab | < 18.0.3 | Yes |
| Application | gitlab | gitlab | < 18.0.3 | Yes |
| Application | gitlab | gitlab | 18.1.0 | Yes |
| Application | gitlab | gitlab | 18.1.0 | Yes |