VDB
CVE-2025-13335
CVE-2025-13335
PUBLISHED
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that under certain circumstances could have allowed an authenticated user to create a denial of service condition by configuring malformed Wiki documents that bypass cycle detection.
EPSS 0.02% · 4.6th percentile
Risk Scores
EPSS Score
0.02%
4.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 18.7.0, 18.8.0, 17.1.0 |
| Bitnami | gitlab | 17.1.0, 18.7.0, 18.8.0 |
Timeline
- Jan 21, 2026 CVE Published
- Jan 21, 2026 PoC Published
- Jan 22, 2026 EPSS Score
- Jan 22, 2026 PoC Published
- Jan 22, 2026 PoC Published
- Jan 23, 2026 PoC Published
- Jan 25, 2026 EPSS Score
- Jan 27, 2026 EPSS Score
- Jan 28, 2026 CVE Updated
- Jan 30, 2026 EPSS Score
- Feb 2, 2026 EPSS Score
- Feb 2, 2026 Security Advisory