CVE-2026-1101
Medium · 6.5CVSS
6.5
EPSS
0.4%
Published
Apr 8, 2026
CISA due date
—
The record
GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user to cause denial of service to the GitLab instance due to improper input validation in GraphQL queries.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-115274 Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard… CWE-1284
- CVE-2026-109821 Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard… CWE-1284
- CVE-2026-119186 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-1284
- CVE-2026-118782 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-1284
- CVE-2026-114349 When a broker decodes a compressed record batch, the per-record decoder reads a declared… CWE-1284
- CVE-2026-103594 A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration… CWE-1284
- CVE-2026-115906 zip is a zip library for Rust that supports reading and writing simple ZIP files. CWE-1284
- CVE-2026-115382 Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service… CWE-1284