CVE-2025-11042

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.2 through 18.2.6 GitLab CE/EE versions 18.3 through 18.3.2 GitLab CE/EE versions 18.4 through 18.4.0

Description The software contains an issue that allows an attacker to cause uncontrolled CPU consumption, potentially leading to a Denial of Service (DoS) condition when using specific GraphQL queries.

Recommendations Update GitLab CE/EE to version 18.2.7 or later. Update GitLab CE/EE to version 18.3.3 or later. Update GitLab CE/EE to version 18.4.1 or later.