GitLab CE/EE Denial-of-Service Vulnerability

Vulnerability

A denial-of-service vulnerability has been addressed in GitLab CE/EE versions 18.5 prior to 18.9.7, 18.10 prior to 18.10.6, and 18.11 prior to 18.11.3. The issue could have allowed an unauthenticated user to disrupt service by sending specially crafted payloads to certain API endpoints.

Impact

Exploitation of this vulnerability could lead to a denial-of-service condition, causing the application to become unresponsive or unavailable.

Added: May 14, 2026, 6:56 AM
Updated: May 14, 2026, 6:56 AM

Vulnerability Rating

Custom Algorithm
spread
7.3
impact
2.5
exploitability
8.7
remediation
7.7
relevance
8.3
threat
6.4
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.