CVE-2026-1168

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.4.6 through 19.1.7 GitLab CE/EE versions 19.2 through 19.2.5 GitLab CE/EE versions 19.3 through 19.3.1

Description An issue exists where an unauthenticated user can cause a denial of service. This occurs due to improper resource allocation limits within the GraphQL complexity calculation logic, which manages the computational cost of queries to prevent server overload.

Recommendations Update GitLab CE/EE versions 18.4.6 through 19.1.7 to version 19.1.8. Update GitLab CE/EE versions 19.2 through 19.2.5 to version 19.2.6. Update GitLab CE/EE versions 19.3 through 19.3.1 to version 19.3.2.