CVE-2025-12664
High · 7.5CVSS
7.5
EPSS
0.6%
Published
Apr 8, 2026
CISA due date
—
The record
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an unauthenticated user to cause denial of service by sending repeated GraphQL queries.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-115274 Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard… CWE-1284
- CVE-2026-109821 Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard… CWE-1284
- CVE-2026-119186 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-1284
- CVE-2026-118782 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-1284
- CVE-2026-114349 When a broker decodes a compressed record batch, the per-record decoder reads a declared… CWE-1284
- CVE-2026-103594 A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration… CWE-1284
- CVE-2026-115906 zip is a zip library for Rust that supports reading and writing simple ZIP files. CWE-1284
- CVE-2026-115382 Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service… CWE-1284