VDB
CVE-2026-3848
CVE-2026-3848
PUBLISHED
Improper Neutralization of CRLF Sequences ('CRLF Injection') in GitLab
EPSS 0.02% · 6.9th percentile
Risk Scores
EPSS Score
0.02%
6.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 18.8.0, 8.11.0, 18.9.0 |
Timeline
- Mar 11, 2026 PoC Published
- Mar 11, 2026 CVE Published
- Mar 12, 2026 EPSS Score
- Mar 12, 2026 PoC Published
- Mar 12, 2026 PoC Published
- Mar 12, 2026 PoC Published
- Mar 13, 2026 EPSS Score
- Mar 14, 2026 EPSS Score
- Mar 15, 2026 EPSS Score
- Mar 16, 2026 EPSS Score
- Mar 17, 2026 EPSS Score
- Mar 17, 2026 Security Advisory