CVE-2025-8014

7.5

HIGHCVSS v3

Published

September 27, 2025

Affected

9 projects

Assigned by

[email protected]

Severity scale

010

Description

Denial of Service issue in GraphQL endpoints in Gitlab EE/CE affecting all versions from 11.10 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1 allows unauthenticated users to potentially bypass query complexity limits leading to resource exhaustion and service disruption.

gitlab

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

>= 11.10.0, < 18.2.7, >= 18.3.0, < 18.3.3, = 18.4.0NVD

@semantic-release/gitlab

NPMsemantic-release plugin to publish a GitLab release

>= 11.10.0, < 18.2.7, >= 18.3.0, < 18.3.3, = 18.4.0NVD

semantic-release/gitlab

GitHub

More on this CVE

NVD↗GitHub Advisory↗

:fox_face: semantic-release plugin to publish a GitLab release

>= 11.10.0, < 18.2.7, >= 18.3.0, < 18.3.3, = 18.4.0NVD

gitlab-org/gitlab

GitLabGitLab is the open-source DevSecOps platform that provides a complete software development lifecycle toolchain including source control, CI/CD, security scanning, and project management in a single application.

>= 11.10.0, < 18.2.7, >= 18.3.0, < 18.3.3, = 18.4.0NVD