GitLab
GitLab Security Releases - January 2026
gitlab-2026-01 Jan 1, 2026 Source: Vendor
GitLab security advisories for January 2026: 10 CVEs, 7 credited researchers.
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
10 lines
Showing 1–10 of 10 matching , clear filters
CVE-2025-10569
BR2026-0000-031962
unclaimed
Denial of Service issue in import functionality impacts GitLab CE/EE
Credited as a92847865
CVE-2025-11246
BR2026-0000-031963
unclaimed
Insufficient Access Control Granularity issue in GraphQL runnerUpdate mutation impacts GitLab CE/EE
Credited as pwnie
CVE-2025-13335
BR2026-0000-031964
unclaimed
Infinite Loop issue in Wiki redirects impacts GitLab CE/EE
Credited as sim4n6
CVE-2025-13761
BR2026-0000-031965
unclaimed
Cross-site Scripting issue in Web IDE impacts GitLab CE/EE
Credited as joaxcar
CVE-2025-13781
BR2026-0000-031966
unclaimed
Missing Authorization issue in AI GraphQL mutation impacts GitLab EE
Credited as pwnie
CVE-2025-13927
BR2026-0000-031967
unclaimed
Denial of Service issue in Jira Connect integration impacts GitLab CE/EE
Credited as a92847865
CVE-2025-13928
BR2026-0000-031968
unclaimed
Incorrect Authorization issue in Releases API impacts GitLab CE/EE
Credited as a92847865
CVE-2025-3950
BR2026-0000-031969
unclaimed
Information Disclosure issue in Mermaid diagram rendering impacts GitLab CE/EE
Credited as rogerace
CVE-2025-9222
BR2026-0000-031970
unclaimed
Stored Cross-site Scripting issue in GitLab Flavored Markdown placeholders impacts GitLab CE/EE
Credited as yvvdwf
CVE-2026-0723
BR2026-0000-031971
unclaimed
Unchecked Return Value issue in authentication services impacts GitLab CE/EE
Credited as ahacker1