GitLab CE/EE Denial-of-Service Vulnerability

Vulnerability

A denial-of-service vulnerability has been addressed in GitLab CE/EE versions 9.0 prior to 18.9.7, 18.10 prior to 18.10.6, and 18.11 prior to 18.11.3. The issue allowed an unauthenticated user to disrupt service by sending specially crafted requests, exploiting insufficient input validation.

Impact

Exploitation of this vulnerability could lead to a denial-of-service condition, causing the application to become unresponsive or unavailable.

Added: May 14, 2026, 6:52 AM
Updated: May 14, 2026, 6:52 AM

Vulnerability Rating

Custom Algorithm
spread
7.3
impact
2.5
exploitability
7.4
remediation
7.7
relevance
8.3
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.