CVE-2025-12983

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 16.9 through 18.3.5 GitLab CE/EE versions 18.4 through 18.4.3 GitLab CE/EE versions 18.5 through 18.5.1

Description An authenticated attacker could cause a denial of service condition by submitting specially crafted markdown content with nested formatting patterns. The issue affects GitLab CE/EE.

Recommendations GitLab CE/EE versions 16.9 through 18.3.5 should be updated to version 18.3.6 or later. GitLab CE/EE versions 18.4 through 18.4.3 should be updated to version 18.4.4 or later. GitLab CE/EE versions 18.5 through 18.5.1 should be updated to version 18.5.2 or later.