CVE-2026-1184CWE-502

Deserialization of Untrusted Data in GitLab

Medium · published May 14, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
25.0
In the wild
Unconfirmed
What it is

GitLab has remediated an issue in GitLab EE affecting all versions from 11.9 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by uploading a specially crafted file due to improper validation.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00331 · 25.0th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-05-14T05:37Z
EPSS history
Timeline
  • 14 MAY 05:37Z
    Deserialization of Untrusted Data in GitLab
    cvelistv5