CVE-2025-10858

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions prior to 18.2.7 GitLab CE/EE versions 18.3 through 18.3.2 GitLab CE/EE versions 18.4 through 18.4.0

Description An issue exists that allows unauthenticated users to cause a Denial of Service (DoS) condition by uploading specifically crafted large JSON files. The issue affects GitLab CE/EE.

Recommendations Update GitLab CE/EE to version 18.2.7 or later. Update GitLab CE/EE to version 18.3.3 or later. Update GitLab CE/EE to version 18.4.1 or later.