BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

GitLab

GitLab Security Releases - August 2025

gitlab-2025-08 Aug 1, 2025 Source: Vendor

GitLab security advisories for August 2025: 15 CVEs, 10 credited researchers.

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

15 lines
All 15 CVEs 15 Additional recognition 0 Unclaimed only
Showing 1–15 of 15
CVE-2024-10219 BR2025-0000-031908 unclaimed
Incorrect Authorization issue in jobs API impacts GitLab CE/EE
Credited as albatraoz
CVE-2024-12303 BR2025-0000-031909 unclaimed
Incorrect Privilege Assignment issue in delete issues operation impacts GitLab CE/EE
Credited as yuki_osaki
CVE-2025-1477 BR2025-0000-031910 unclaimed
Allocation of Resources Without Limits issue in Mattermost integration impacts GitLab CE/EE
Credited as pwnie
CVE-2025-2246 BR2025-0000-031911 unclaimed
Missing authentication issue in GraphQL endpoint impacts GitLab CE/EE
Credited as pwnie
CVE-2025-2498 BR2025-0000-031912 unclaimed
Insufficient Access Control issue in IP Restriction impacts GitLab EE
Credited as rogerace
CVE-2025-2614 BR2025-0000-031913 unclaimed
Allocation of Resources Without Limits issue in release name creation impacts GitLab CE/EE
Credited as pwnie
CVE-2025-2937 BR2025-0000-031914 unclaimed
Inefficient Regular Expression Complexity issue in wiki impacts GitLab CE/EE
Credited as yuki_osaki
CVE-2025-3601 BR2025-0000-031915 unclaimed
Allocation of Resources Without Limits issue in import function impacts GitLab CE/EE
Credited as nermalt
CVE-2025-4225 BR2025-0000-031916 unclaimed
Allocation of Resources Without Limits issue in GraphQL impacts GitLab CE/EE
Credited as pwnie
CVE-2025-5101 BR2025-0000-031917 unclaimed
Code injection issue in GitLab repositories impacts GitLab CE/EE
Credited as st4nly0n
CVE-2025-5819 BR2025-0000-031918 unclaimed
Incorrect Permission Assignment issue in ID token impacts GitLab CE/EE
Credited as skybound
CVE-2025-6186 BR2025-0000-031919 unclaimed
Cross-site scripting issue in Workitem impacts GitLab CE/EE
Credited as joaxcar
CVE-2025-7734 BR2025-0000-031920 unclaimed
Cross-site scripting issue in blob viewer impacts GitLab CE/EE
Credited as joaxcar
CVE-2025-7739 BR2025-0000-031921 unclaimed
Cross-site scripting issue in labels impacts GitLab CE/EE
Credited as yvvdwf
CVE-2025-8094 BR2025-0000-031922 unclaimed
Improper Handling of Permissions issue in project API impacts GitLab CE/EE
Credited as abdelrahman_maged