Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-8014

Denial of Service issue in GraphQL endpoints in Gitlab EE/CE affecting all versions from 11.10 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1 allows unauthenticated users to potentially bypass query complexity limits leading to resource exhaustion and service disruption.

Published

2025-09-27T17:15:33.987

Last Modified

2025-10-03T18:23:37.553

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Primary
    CWE-770
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application gitlab gitlab < 18.2.7 Yes
Application gitlab gitlab < 18.2.7 Yes
Application gitlab gitlab < 18.3.3 Yes
Application gitlab gitlab < 18.3.3 Yes
Application gitlab gitlab 18.4.0 Yes
Application gitlab gitlab 18.4.0 Yes
References