CVE-2026-3988

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.5 through 18.8.6 GitLab CE/EE versions 18.9 through 18.9.2 GitLab CE/EE versions 18.10 through 18.10.0

Description An issue exists in GitLab CE/EE that could allow an unauthenticated user to cause a denial of service. This occurs due to improper input validation in GraphQL request processing, potentially making the GitLab instance unresponsive.

Recommendations Update GitLab CE/EE to version 18.8.7 or later. Update GitLab CE/EE to version 18.9.3 or later. Update GitLab CE/EE to version 18.10.1 or later.