GCVE-110-NCSC-2025-306

Advisory PublishedCVSS 7.5/10

Vulnetix · Advisory published October 13, 2025

GitLab has addressed a vulnerability in versions 13.12 to 18.2.8, 18.3 to 18.3.4, and 18.4 to 18.4.2 that could lead to unresponsiveness from specially crafted GraphQL queries targeting large repository blobs.

Download JSON Open in Console

Weaknesses (CWE)

CWE-770Allocation of Resources Without Limits or ThrottlingCWE-863Incorrect Authorization

Risk Scores

CVSS 3.1

7.5/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions	Platforms
GitLab	vers:unknown/*	—	—

Aliases

CVE-2025-10004 CVE-2025-11340 CVE-2025-2934 CVE-2025-9825

References

advisory

Browse GCVE Records

73,734 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON