High · published October 27, 2025
⚡ An unauthenticated attacker could crash your GitLab instance with just a specially crafted payload! 🚨 Think of it as a mischievous kid throwing a rock through a window — it doesn't take much effort to cause chaos and disrupt everything inside. This vulnerability lets attackers throw their own 'rocks' that could bring your GitLab services to a grinding halt! If exploited, this vulnerability could lead to a denial of service, meaning legitimate users may be locked out of their projects and unable to collaborate. Imagine a team of superheroes stuck outside their lair because the door's been jammed shut! This could severely impact productivity and project timelines for everyone involved.
Think of it as a mischievous kid throwing a rock through a window — it doesn't take much effort to cause chaos and disrupt everything inside. This vulnerability lets attackers throw their own 'rocks' that could bring your GitLab services to a grinding halt! CVE-2025-10497 is a denial of service vulnerability in GitLab CE/EE that allows an unauthenticated attacker to send specially crafted payloads, causing the application to become unresponsive. Versions affected include all from 17.10 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1.
If exploited, this vulnerability could lead to a denial of service, meaning legitimate users may be locked out of their projects and unable to collaborate. Imagine a team of superheroes stuck outside their lair because the door's been jammed shut! This could severely impact productivity and project timelines for everyone involved. Make sure to upgrade GitLab to at least version 18.3.5, 18.4.3, or 18.5.1 to mitigate this issue. Regularly check for updates and apply patches to ensure your services remain secure and reliable. You've got this! Update your GitLab and keep those services up and running smoothly! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| gitlab/gitlab | ≥ 17.10.0, < 18.3.5 | 18.3.5 |
| gitlab/gitlab | ≥ 17.10.0, < 18.3.5 | 18.3.5 |
| gitlab/gitlab | ≥ 18.4.0, < 18.4.3 | 18.4.3 |
| gitlab/gitlab | ≥ 18.4.0, < 18.4.3 | 18.4.3 |
| gitlab/gitlab | all versions | — |
| gitlab/gitlab | all versions | — |