PT-2026-3765 · Gitlab · Gitlab Ce/Ee

Published

2026-01-21

·

Updated

2026-03-06

·

CVE-2025-13927

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 11.9 through 18.6.3 GitLab CE/EE versions 18.7 through 18.7.1 GitLab CE/EE versions 18.8 through 18.8.1
Description GitLab CE/EE is affected by an issue related to unrestricted resource allocation. An unauthenticated attacker can potentially cause a denial of service by sending specially crafted requests with malformed authentication data. The issue impacts the GitLab Jira Connect integration.
Recommendations GitLab CE/EE versions 11.9 through 18.6.3 should be updated to version 18.6.4 or later. GitLab CE/EE versions 18.7 through 18.7.1 should be updated to version 18.7.2 or later. GitLab CE/EE versions 18.8 through 18.8.1 should be updated to version 18.8.2 or later.

Exploit

Fix

DoS

Allocation of Resources Without Limits

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2026-00786
BIT-GITLAB-2025-13927
CVE-2025-13927

Affected Products

Gitlab Ce/Ee