GitLab 18.9.0 Enterprise Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:gitlab:gitlab:18.9.0:*:*:*:enterprise:*:*:*
part: a version: 18.9.0 update: *
| Vendor | Gitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90) |
|---|---|
| Product | Gitlab (5414fcda-a172-5f72-b6e4-b415a19d21eb) |
| Edition | * |
| Language | * |
| Software edition | enterprise |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gitlab/gitlab-org/gitlab |
purl2cpe | 2026-06-01 10:14:46.352551 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-2845 |
vulnerable | 2026-06-08 07:55:17.597681 |
Allocation of Resources Without Limits or Throttling in GitLab
MEDIUM (6.5)
An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an authenticated user to cause denial of service by exploiting a Bitbucket Server import endpoint via repeatedly sending large responses.
Published: 2026-02-25T20:04:35.210Z
Updated: 2026-02-26T15:45:14.406Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1747 |
vulnerable | 2026-06-08 07:49:09.526738 |
Authentication Bypass Using an Alternate Path or Channel in GitLab
MEDIUM (4.3)
GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packages.
Published: 2026-02-25T20:04:49.893Z
Updated: 2026-02-26T15:39:03.951Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1725 |
vulnerable | 2026-06-08 07:49:09.475772 |
Allocation of Resources Without Limits or Throttling in GitLab
MEDIUM (5.3)
GitLab has remediated an issue in GitLab CE/EE affecting versions from 18.9 before 18.9.1 that could have under certain conditions, allowed an unauthenticated user to cause denial of service by sending specially crafted requests to a CI jobs API endpoint.
Published: 2026-02-25T20:04:44.830Z
Updated: 2026-02-26T15:42:29.688Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1662 |
vulnerable | 2026-06-08 07:49:09.146552 |
Allocation of Resources Without Limits or Throttling in GitLab
HIGH (7.5)
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denial of Service by sending specially crafted requests to the Jira events endpoint.
Published: 2026-02-25T20:04:59.913Z
Updated: 2026-02-26T15:10:46.924Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1388 |
vulnerable | 2026-06-08 07:49:08.474912 |
Inefficient Regular Expression Complexity in GitLab
HIGH (7.5)
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause regular expression denial of service by sending specially crafted input to a merge request endpoint under certain conditions.
Published: 2026-02-25T20:05:05.289Z
Updated: 2026-02-26T15:07:56.004Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0752 |
vulnerable | 2026-06-08 07:47:13.141338 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3525 |
vulnerable | 2026-06-08 07:23:09.246363 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14511 |
vulnerable | 2026-06-08 07:06:34.589766 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14103 |
vulnerable | 2026-06-08 07:06:33.589672 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.