Cloudanix VulnDB

CVE-2025-3950

Low · 3.5

CVSS

3.5

EPSS

0.3%

Published

Jan 9, 2026

CISA due date

—

The record

Exposure of Private Personal Information to an Unauthorized Actor in GitLab

Affected packages

Ecosystem Package Introduced Fixed
Bitnami gitlab 10.3.0 18.5.5
Chainguard gitlab-rails-ce-18.1 0 18.1.6-r3
Chainguard gitlab-rails-ce-18.2 0 18.2.8-r3
Chainguard gitlab-rails-ce-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-18.4 0 18.4.6-r1
Chainguard gitlab-rails-ce-assets-18.1 0 18.1.6-r3
Chainguard gitlab-rails-ce-assets-18.2 0 18.2.8-r3
Chainguard gitlab-rails-ce-assets-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-assets-fips-18.1 0 18.1.6-r4
Chainguard gitlab-rails-ce-assets-fips-18.2 0 18.2.8-r4
Chainguard gitlab-rails-ce-assets-fips-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-assets-fips-18.4 0 18.4.6-r1
Chainguard gitlab-rails-ce-doc-18.1 0 18.1.6-r3
Chainguard gitlab-rails-ce-doc-18.2 0 18.2.8-r3
Chainguard gitlab-rails-ce-doc-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-doc-18.4 0 18.4.6-r1
Chainguard gitlab-rails-ce-doc-fips-18.1 0 18.1.6-r4
Chainguard gitlab-rails-ce-doc-fips-18.2 0 18.2.8-r4
Chainguard gitlab-rails-ce-doc-fips-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-doc-fips-18.4 0 18.4.6-r1
Chainguard gitlab-rails-ce-fips-18.1 0 18.1.6-r4
Chainguard gitlab-rails-ce-fips-18.2 0 18.2.8-r4
Chainguard gitlab-rails-ce-fips-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-fips-18.4 0 18.4.6-r1
Chainguard gitlab-workhorse-ce-18.1 0 18.1.6-r3
Chainguard gitlab-workhorse-ce-18.2 0 18.2.8-r3
Chainguard gitlab-workhorse-ce-18.3 0 18.3.6-r2
Chainguard gitlab-workhorse-ce-18.4 0 18.4.6-r0
Chainguard gitlab-workhorse-ce-fips-18.1 0 18.1.6-r4
Chainguard gitlab-workhorse-ce-fips-18.2 0 18.2.8-r3

Related vulnerabilities