CVE-2025-12506

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 16.5 through 18.11.6 GitLab CE/EE versions 19.0 through 19.0.3 GitLab CE/EE versions 19.1 through 19.1.1

Description An issue exists where an authenticated user can create a repository where the content displayed in the web interface differs from the content available for download. This occurs due to improper handling of Git reference name resolution, which is the process Git uses to determine which commit a branch or tag name points to.

Recommendations Update to version 18.11.7 or later. Update to version 19.0.4 or later. Update to version 19.1.2 or later.