GitLab Security Advisory: 9 CVEs including XSS, Info Disclosure, and Prompt Injection in 18.5.2/18.4.4/18.3.6

about.gitlab.com 2025-11-15查看中文 →

Security AdvisoryHighGitLab

Affected:

GitLab Community Edition 18.5
GitLab Enterprise Edition 18.5
GitLab Community Edition 18.4
GitLab Enterprise Edition 18.4
GitLab Community Edition 18.3

Fixed in:

18.5.2
18.4.4
18.3.6

Referenced CVEs: CVE-2025-11224 · 7.7 CVE-2025-12983 · 3.5 CVE-2025-2615 · 4.3 CVE-2025-6945 · 3.5 CVE-2025-6171 · 5.3 CVE-2025-7000 · 4.3 CVE-2025-7736 · 3.1 CVE-2025-11865 · 4.3 CVE-2025-11990 · 3.1

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from about.gitlab.com, cleaned by our LLM pipeline, and translated to English. View original.

Offline Archive

Offline screenshot & PDF are Pro-exclusive