Volerion logoVolerion
Volerion logoVolerion

GitLab CE/EE Denial-of-Service Vulnerability in Discussions Endpoint

Vulnerability

A denial-of-service vulnerability has been identified in GitLab Community Edition (CE) and Enterprise Edition (EE) versions 10.6 prior to 18.9.6, 18.10 prior to 18.10.4, and 18.11 prior to 18.11.1. This vulnerability could allow an authenticated user to exhaust server resources by sending crafted requests to a discussions endpoint, under certain conditions.

Impact

Exploitation of this vulnerability could lead to a denial-of-service condition, causing server resource exhaustion.

Remediation

Users are advised to upgrade to GitLab versions 18.11.1, 18.10.4, or 18.9.6. Instructions for updating GitLab can be found on the GitLab Update page.

Added: Apr 22, 2026, 6:39 PM
Updated: Apr 22, 2026, 6:39 PM

Vulnerability Rating

Custom Algorithm
spread
7.3
impact
2.5
exploitability
5.2
remediation
7.7
relevance
6.5
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.