CVE-2026-2845
EUVD-2026-874225.02.2026, 21:16
An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an authenticated user to cause denial of service by exploiting a Bitbucket Server import endpoint via repeatedly sending large responses.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 11.2.0 ≤ 𝑥 < 18.7.5 |
| gitlab | gitlab | 11.2.0 ≤ 𝑥 < 18.7.5 |
| gitlab | gitlab | 18.8.0 ≤ 𝑥 < 18.8.5 |
| gitlab | gitlab | 18.8.0 ≤ 𝑥 < 18.8.5 |
| gitlab | gitlab | 18.9.0 |
| gitlab | gitlab | 18.9.0 |
𝑥
= Vulnerable software versions
