GitLab
GitLab Security Releases - October 2025
gitlab-2025-10 Oct 1, 2025 Source: Vendor
GitLab security advisories for October 2025: 7 CVEs, 7 credited researchers.
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
8 lines
Showing 1–8 of 8
CVE-2025-10004
BR2025-0000-031934
unclaimed
Denial of Service issue in GraphQL blob type impacts GitLab CE/EE
Credited as pwnie
CVE-2025-10497
BR2025-0000-031935
unclaimed
Denial of service issue in event collection impacts GitLab CE/EE
Credited as a92847865
CVE-2025-11447
BR2025-0000-031936
unclaimed
Denial of service issue in JSON validation impacts GitLab CE/EE
Credited as a92847865
CVE-2025-11702
BR2025-0000-031937
unclaimed
Improper access control issue in runner API impacts GitLab EE
Credited as iamgk808
CVE-2025-2934
BR2025-0000-031938
unclaimed
Denial of Service issue in webhook endpoints impacts GitLab CE/EE
Credited as ppee
CVE-2025-6601
BR2025-0000-031939
unclaimed
Business logic error issue in group memberships impacts GitLab EE
Credited as mateuszek
CVE-2025-6601
BR2025-0000-031940
unclaimed
Business logic error issue in group memberships impacts GitLab EE
Credited as rhidayahh
CVE-2025-9825
BR2025-0000-031941
unclaimed
Missing authorization issue in manual jobs impacts GitLab CE/EE
Credited as joaxcar