Vulnerabilities fixed in GitLab

🗓️ 27 Nov 2025 13:35:09Reported by NCSCType

GitLab fixed DoS, unauthorized organization access, and token exposure flaws in CE and EE.

Reporter	Title	Published	Views	Family All 94
FreeBSD	Gitlab -- vulnerabilities	26 Nov 202500:00	–	freebsd
ATTACKERKB	CVE-2025-13611	26 Nov 202519:45	–	attackerkb
BDU FSTEC	The vulnerability of the software platform’s JSON file processing mechanism, based on Git, allows a violator to trigger a service failure. This vulnerability enables a violator to cause a service failure.	1 Dec 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to bypassing authentication through spoofing, allows attackers to connect themselves to any organizations they choose.	30 Dec 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from insufficient protection of registration data, allowing attackers to disclose sensitive information.	30 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software platform’s configuration based on Git for collaborative code development on GitLab allows a hacker to disclose protected information from security reports.	30 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to memory resource exhaustion, allows a hacker to trigger a service failure.	30 Jan 202600:00	–	bdu_fstec
Chainguard	CVE-2025-12571 vulnerabilities	28 Jan 202619:17	–	cgr
Chainguard	CVE-2025-12653 vulnerabilities	28 Jan 202619:17	–	cgr
Chainguard	CVE-2025-13611 vulnerabilities	28 Jan 202619:17	–	cgr