CVE-2026-7250

HIGH CVSS 7.5 View on NVD ↗

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper input validation in the API request parsing middleware.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

gitlab/gitlab

References

https://about.gitlab.com/releases/2026/06/10/patch-release-gitlab-19-0-2-released/
https://gitlab.com/gitlab-org/gitlab/-/work_items/598311
https://hackerone.com/reports/3671995

Published: Jun 11, 2026 12:16 UTC Modified: Jun 11, 2026 17:34 UTC