CVE-2025-12576: GitLab

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that under certain conditions could have allowed an authenticated user to cause a denial of service due to improper handling of webhook response data.

Affected products

• GitLab GitLab: from 9.3.0, before 18.7.6 (fixed in 18.7.6); from 18.8.0, before 18.8.6 (fixed in 18.8.6); from 18.9.0, before 18.9.2 (fixed in 18.9.2)

Published 2026-03-11. Last modified 2026-06-17.