Cloudanix VulnDB

CVE-2025-9222

High · 8.7

CVSS

8.7

EPSS

0.4%

Published

Jan 9, 2026

CISA due date

—

The record

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Affected packages

Ecosystem Package Introduced Fixed
Bitnami gitlab 18.2.2 18.5.5
Chainguard gitlab-rails-ce-18.2 0 18.2.8-r3
Chainguard gitlab-rails-ce-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-18.4 0 18.4.6-r1
Chainguard gitlab-rails-ce-assets-18.2 0 18.2.8-r3
Chainguard gitlab-rails-ce-assets-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-assets-fips-18.2 0 18.2.8-r4
Chainguard gitlab-rails-ce-assets-fips-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-assets-fips-18.4 0 18.4.6-r1
Chainguard gitlab-rails-ce-doc-18.2 0 18.2.8-r3
Chainguard gitlab-rails-ce-doc-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-doc-18.4 0 18.4.6-r1
Chainguard gitlab-rails-ce-doc-fips-18.2 0 18.2.8-r4
Chainguard gitlab-rails-ce-doc-fips-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-doc-fips-18.4 0 18.4.6-r1
Chainguard gitlab-rails-ce-fips-18.2 0 18.2.8-r4
Chainguard gitlab-rails-ce-fips-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-fips-18.4 0 18.4.6-r1
Chainguard gitlab-workhorse-ce-18.2 0 18.2.8-r3
Chainguard gitlab-workhorse-ce-18.3 0 18.3.6-r2
Chainguard gitlab-workhorse-ce-18.4 0 18.4.6-r0
Chainguard gitlab-workhorse-ce-fips-18.2 0 18.2.8-r3

Related vulnerabilities