CVE-2025-10858 — Vulnetix

Try Vulnetix Request Demo

CVE-2025-10858 PUBLISHED

An issue was discovered in GitLab CE/EE affecting all versions before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that allows unauthenticated users to cause a Denial of Service (DoS) condition while uploading specifically crafted large JSON files.

EPSS 0.09% · 24.7th percentile

Risk Scores

EPSS Score

0.09%

24.7th percentile

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	0, 18.3.0, 18.4.0
Bitnami	gitlab	0, 18.3.0, 18.4.0

Timeline

Jan 21, 1970 Security Advisory
Sep 22, 2025 CVE ID Reserved
Sep 26, 2025 CVE Published
Sep 26, 2025 EPSS Score
Sep 26, 2025 CVE Updated
Oct 2, 2025 EPSS Score
Oct 3, 2025 Coalition ESS Score
Oct 6, 2025 Coalition ESS Score
Oct 8, 2025 EPSS Score
Oct 15, 2025 EPSS Score
Oct 15, 2025 Coalition ESS Score
Oct 21, 2025 EPSS Score

References

Open in Interactive Console →