BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

GitLab

GitLab Security Releases - November 2025

gitlab-2025-11 Nov 1, 2025 Source: Vendor

GitLab security advisories for November 2025: 13 CVEs, 10 credited researchers.

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

13 lines
All 13 CVEs 13 Additional recognition 0 Unclaimed only
Showing 1–13 of 13
CVE-2024-9183 BR2025-0000-031942 unclaimed
Race condition issue in CI/CD cache impacts GitLab CE/EE
Credited as aphantom
CVE-2025-11224 BR2025-0000-031943 unclaimed
Cross-site scripting issue in k8s proxy impacts GitLab CE/EE
Credited as joaxcar
CVE-2025-11990 BR2025-0000-031944 unclaimed
Client Side Path Traversal issue in branch names impacts GitLab EE
Credited as swiftee
CVE-2025-12571 BR2025-0000-031945 unclaimed
Denial of Service issue in JSON input validation middleware impacts GitLab CE/EE
Credited as a92847865
CVE-2025-12653 BR2025-0000-031946 unclaimed
Authentication bypass issue in account registration impacts GitLab CE/EE
Credited as pwnie
CVE-2025-12983 BR2025-0000-031947 unclaimed
Denial of service issue in markdown impacts GitLab CE/EE
Credited as phli
CVE-2025-2615 BR2025-0000-031948 unclaimed
Information Disclosure issue in GraphQL subscriptions impacts GitLab CE/EE
Credited as rogerace
CVE-2025-6171 BR2025-0000-031949 unclaimed
Information Disclosure issue in packages API endpoint impacts GitLab CE/EE
Credited as iamgk808
CVE-2025-6195 BR2025-0000-031950 unclaimed
Improper authorization issue in markdown rendering impacts GitLab EE
Credited as mateuszek
CVE-2025-6945 BR2025-0000-031951 unclaimed
Prompt Injection issue in GitLab Duo review impacts GitLab EE
Credited as rogerace
CVE-2025-7000 BR2025-0000-031952 unclaimed
Information Disclosure issue in access control impacts GitLab CE/EE
Credited as weasterhacker
CVE-2025-7449 BR2025-0000-031953 unclaimed
Denial of Service issue in HTTP response processing impacts GitLab CE/EE
Credited as a92847865
CVE-2025-7736 BR2025-0000-031954 unclaimed
Improper Access Control issue in GitLab Pages impacts GitLab CE/EE
Credited as mateuszek