CVE-2025-13436 in Community Edition
Summary
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticated user to cause a denial of service due to excessive resource consumption when handling certain CI-related inputs.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Responsible
GitLab
Reservation
11/19/2025
Disclosure
03/25/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 353218 | GitLab Community Edition/Enterprise Edition allocation of resources | 770 | Not defined | Official fix | CVE-2025-13436 |