Vulnerabilities fixed in GitLab Community Edition and Enterprise Edition

🗓️ 22 Jan 2026 12:35:30Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 11 Views

GitLab fixed DoS and data access flaws for Community and Enterprise Editions versions 18.6.4, 18.7.2, 18.8.2.

Reporter	Title	Published	Views	Family All 223
FreeBSD	Gitlab -- vulnerabilities	21 Jan 202600:00	–	freebsd
ATTACKERKB	CVE-2025-13928	22 Jan 202613:34	–	attackerkb
ATTACKERKB	CVE-2026-0723	22 Jan 202613:34	–	attackerkb
ATTACKERKB	CVE-2025-13335	22 Jan 202610:04	–	attackerkb
ATTACKERKB	CVE-2025-13927	22 Jan 202613:34	–	attackerkb
ATTACKERKB	CVE-2026-1102	22 Jan 202613:33	–	attackerkb
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to unlimited resource distribution, allows a hacker to cause a service failure.	26 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab CE/EE arises from the lack of checks for the return value. This allows attackers to increase their privileges.	30 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab CE/EE lies in its unlimited resource distribution. This allows a hacker to trigger a service failure by sending repeated incorrect SSH authentication requests.	30 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab CE/EE, related to deficiencies in the authentication process, allows a violator to trigger a service failure.	30 Jan 202600:00	–	bdu_fstec

Source	Link
about	www.about.gitlab.com/releases/2026/01/21/patch-release-gitlab-18-8-2-released/

22 Jan 2026 12:35Current

5.5Medium risk

Vulners AI Score5.5

CVSS 45.3

CVSS 3.17.5

EPSS0.00846

SSVC

gitlab denial of service data access community edition enterprise edition version 18.6.4 version 18.7.2 version 18.8.2