{"schemaVersion":3,"id":"CVE-2025-13335","aliases":["UBUNTU-CVE-2025-13335","CGA-6g3p-9fqr-hjm9","CGA-829f-2674-vh73","CGA-95hq-45gw-g84h","CGA-9r67-8g3j-79w5","CGA-9w33-v24v-9mf2","CGA-f8w4-934h-27jg","CGA-fpx9-4926-3p92","CGA-g754-q36v-78fg","CGA-j2xc-3rwx-qpvv","CGA-j4wg-87qp-536g","CGA-j6rv-w6gh-gm2j","CGA-xh75-vww8-mpw5","CGA-258g-4jx4-32f2","CGA-28r2-7632-p9wj","CGA-2g5x-rg2q-4fmm","CGA-2rmx-4r7w-pqp8","CGA-36jc-x44g-h78w","CGA-3726-cm7c-pwp3","CGA-3fc8-xp9g-cvv4","CGA-3pw3-qqfp-jp6g","CGA-3qhw-f8jv-4h5m","CGA-3xmw-mjfp-jq82","CGA-4fq5-x9jp-qpw4","CGA-4hj5-95xr-wj6q","CGA-53m9-qm8j-cx3v","CGA-5mx4-9m9m-q4j2","CGA-62fr-h8vp-jhm5","CGA-64pm-58r5-phf4","CGA-6c64-rjvj-ggr5","CGA-6gp9-w7r2-28mj","CGA-6j27-854q-3gr9","CGA-6wcv-wh25-9jr4","CGA-73gg-7fj6-qv5p","CGA-73q8-wc54-2xc4","CGA-79v2-g64m-hcw8","CGA-7mvh-89vp-m5ph","CGA-834r-q4rg-wpvm","CGA-8599-55xh-cfc3","CGA-8cxp-gvjq-vpr9","CGA-8jgc-8jf6-429c","CGA-8q8m-v8pj-8vmq","CGA-938q-vqq8-52x2","CGA-952r-cjwm-rqhc","CGA-98v2-m32m-qvv6","CGA-9ccc-q85v-4chm","CGA-9hcj-8ghg-q6p5","CGA-9phf-cg2g-8wqx","CGA-9x77-vh8g-xqvc","CGA-9xjr-fvv5-vgh7","CGA-c33w-fmc6-rvh5","CGA-c8g3-cmj5-jqxq","CGA-ccm8-jqrv-67qv","CGA-cgw6-22pj-3m2f","CGA-cm9x-cg72-4c5w","CGA-cqq6-wcxq-w9pw","CGA-cvc4-h358-8hx7","CGA-f2p3-vrff-v96c","CGA-f5g4-wr4v-62mx","CGA-f8rf-vc4h-65q7","CGA-fm4f-pwq3-gj82","CGA-fwcj-ffqx-c45m","CGA-g574-9j4q-ggvv","CGA-g772-rfhj-xmgh","CGA-gq6c-j7mj-72mr","CGA-h86g-997v-f3hc","CGA-j3px-99pr-fqm9","CGA-jwr4-5272-g3wr","CGA-jxv9-cjrg-65f7","CGA-jxx7-532h-hh3x","CGA-m638-mx9v-8mvm","CGA-m76v-xc9j-f3xg","CGA-mf58-x2wp-p5mp","CGA-mhhp-5hg5-pvmx","CGA-mmfg-2f53-rc3r","CGA-mp95-9fv7-m95p","CGA-mpxp-p5m9-ch4w","CGA-p649-cg48-3gc6","CGA-pr7m-87gh-rjp8","CGA-prmq-p367-rx86","CGA-q32g-6gjp-gg5x","CGA-q72j-hff9-r5xp","CGA-q8c2-92cx-m9qg","CGA-q975-9w39-fv24","CGA-qgcp-cc46-g456","CGA-qgq9-w2h5-343r","CGA-qgxx-fjrg-34c8","CGA-rch2-7472-7xvj","CGA-rcr7-mxp7-v83f","CGA-rg3p-5j43-2p7h","CGA-rwc2-49r2-34q8","CGA-v2ww-545c-qr3w","CGA-v3j5-vg3j-2xq4","CGA-v629-9pp7-52x4","CGA-v8xh-xvvx-6h7m","CGA-vfm5-mqmp-gw52","CGA-vm66-qv7r-vm7v","CGA-w5w4-x42r-659p","CGA-w7xv-v73q-f7gf","CGA-wc95-vj3w-hmx7","CGA-wpqh-xvxm-m3qr","CGA-wv5f-c688-g287","CGA-xchv-p89w-gm3c","CGA-xj4j-hx39-c6xg","CGA-xm92-hqcp-vw63"],"status":"published","duplicateOf":null,"title":null,"description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that under certain circumstances could have allowed an authenticated user to create a denial of service condition by configuring malformed Wiki documents that bypass cycle detection.","dates":{"published":"2026-01-22T10:04:27.602Z","modified":"2026-01-22T14:12:36.778Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00566,"percentile":0.4619,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":-0.00899999999999998,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00575},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00566,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00566,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00566,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00566,"percentile":0.4619}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00575,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00566,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00566,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00566,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00566,"percentile":0.4619}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_449DC21D47F089D3","name":"Exploit Reference (hackerone.com)","source":"reference","url":"https://hackerone.com/reports/3418023","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-835","name":"Loop with Unreachable Exit Condition ('Infinite Loop')","description":"The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/835.html"}],"affected":[{"vendor":"chainguard","product":"gitlab-docker-machine-18.8","name":"gitlab-docker-machine-18.8","label":"gitlab-docker-machine-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-docker-machine-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-docker-machine-fips-18.8","name":"gitlab-docker-machine-fips-18.8","label":"gitlab-docker-machine-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-docker-machine-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.2","name":"gitlab-rails-ce-18.2","label":"gitlab-rails-ce-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.3","name":"gitlab-rails-ce-18.3","label":"gitlab-rails-ce-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.4","name":"gitlab-rails-ce-18.4","label":"gitlab-rails-ce-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.5","name":"gitlab-rails-ce-18.5","label":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-18.1","name":"gitlab-rails-ce-assets-18.1","label":"gitlab-rails-ce-assets-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-18.2","name":"gitlab-rails-ce-assets-18.2","label":"gitlab-rails-ce-assets-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-18.3","name":"gitlab-rails-ce-assets-18.3","label":"gitlab-rails-ce-assets-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-18.4","name":"gitlab-rails-ce-assets-18.4","label":"gitlab-rails-ce-assets-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-18.5","name":"gitlab-rails-ce-assets-18.5","label":"gitlab-rails-ce-assets-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-fips-18.1","name":"gitlab-rails-ce-assets-fips-18.1","label":"gitlab-rails-ce-assets-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-fips-18.2","name":"gitlab-rails-ce-assets-fips-18.2","label":"gitlab-rails-ce-assets-fips-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-fips-18.3","name":"gitlab-rails-ce-assets-fips-18.3","label":"gitlab-rails-ce-assets-fips-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-fips-18.4","name":"gitlab-rails-ce-assets-fips-18.4","label":"gitlab-rails-ce-assets-fips-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-assets-fips-18.5","name":"gitlab-rails-ce-assets-fips-18.5","label":"gitlab-rails-ce-assets-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-assets-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-18.1","name":"gitlab-rails-ce-doc-18.1","label":"gitlab-rails-ce-doc-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-18.2","name":"gitlab-rails-ce-doc-18.2","label":"gitlab-rails-ce-doc-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-18.3","name":"gitlab-rails-ce-doc-18.3","label":"gitlab-rails-ce-doc-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-18.4","name":"gitlab-rails-ce-doc-18.4","label":"gitlab-rails-ce-doc-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-18.5","name":"gitlab-rails-ce-doc-18.5","label":"gitlab-rails-ce-doc-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-fips-18.1","name":"gitlab-rails-ce-doc-fips-18.1","label":"gitlab-rails-ce-doc-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-fips-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-fips-18.2","name":"gitlab-rails-ce-doc-fips-18.2","label":"gitlab-rails-ce-doc-fips-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-fips-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-fips-18.3","name":"gitlab-rails-ce-doc-fips-18.3","label":"gitlab-rails-ce-doc-fips-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-fips-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-fips-18.4","name":"gitlab-rails-ce-doc-fips-18.4","label":"gitlab-rails-ce-doc-fips-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-fips-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-doc-fips-18.5","name":"gitlab-rails-ce-doc-fips-18.5","label":"gitlab-rails-ce-doc-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-doc-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.2","name":"gitlab-rails-ce-fips-18.2","label":"gitlab-rails-ce-fips-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.3","name":"gitlab-rails-ce-fips-18.3","label":"gitlab-rails-ce-fips-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.4","name":"gitlab-rails-ce-fips-18.4","label":"gitlab-rails-ce-fips-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.5","name":"gitlab-rails-ce-fips-18.5","label":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-18.8","name":"gitlab-runner-18.8","label":"gitlab-runner-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-fips-18.8","name":"gitlab-runner-fips-18.8","label":"gitlab-runner-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-18.8","name":"gitlab-runner-helper-18.8","label":"gitlab-runner-helper-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-compat-18.8","name":"gitlab-runner-helper-compat-18.8","label":"gitlab-runner-helper-compat-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-compat-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-compat-fips-18.8","name":"gitlab-runner-helper-compat-fips-18.8","label":"gitlab-runner-helper-compat-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-compat-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-fips-18.8","name":"gitlab-runner-helper-fips-18.8","label":"gitlab-runner-helper-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-oci-entrypoint-18.8","name":"gitlab-runner-helper-oci-entrypoint-18.8","label":"gitlab-runner-helper-oci-entrypoint-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-oci-entrypoint-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-helper-oci-entrypoint-fips-18.8","name":"gitlab-runner-helper-oci-entrypoint-fips-18.8","label":"gitlab-runner-helper-oci-entrypoint-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-helper-oci-entrypoint-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-oci-entrypoint-18.8","name":"gitlab-runner-oci-entrypoint-18.8","label":"gitlab-runner-oci-entrypoint-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-oci-entrypoint-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-runner-oci-entrypoint-fips-18.8","name":"gitlab-runner-oci-entrypoint-fips-18.8","label":"gitlab-runner-oci-entrypoint-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-runner-oci-entrypoint-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.1","name":"gitlab-workhorse-ce-18.1","label":"gitlab-workhorse-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.2","name":"gitlab-workhorse-ce-18.2","label":"gitlab-workhorse-ce-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.3","name":"gitlab-workhorse-ce-18.3","label":"gitlab-workhorse-ce-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.4","name":"gitlab-workhorse-ce-18.4","label":"gitlab-workhorse-ce-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.5","name":"gitlab-workhorse-ce-18.5","label":"gitlab-workhorse-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.1","name":"gitlab-workhorse-ce-fips-18.1","label":"gitlab-workhorse-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.2","name":"gitlab-workhorse-ce-fips-18.2","label":"gitlab-workhorse-ce-fips-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.3","name":"gitlab-workhorse-ce-fips-18.3","label":"gitlab-workhorse-ce-fips-18.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.4","name":"gitlab-workhorse-ce-fips-18.4","label":"gitlab-workhorse-ce-fips-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.5","name":"gitlab-workhorse-ce-fips-18.5","label":"gitlab-workhorse-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-docker-machine-18.8","name":"gitlab-docker-machine-18.8","label":"gitlab-docker-machine-18.8","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-docker-machine-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-runner-18.8","name":"gitlab-runner-18.8","label":"gitlab-runner-18.8","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-runner-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-runner-helper-18.8","name":"gitlab-runner-helper-18.8","label":"gitlab-runner-helper-18.8","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-runner-helper-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-runner-helper-compat-18.8","name":"gitlab-runner-helper-compat-18.8","label":"gitlab-runner-helper-compat-18.8","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-runner-helper-compat-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-runner-helper-oci-entrypoint-18.8","name":"gitlab-runner-helper-oci-entrypoint-18.8","label":"gitlab-runner-helper-oci-entrypoint-18.8","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-runner-helper-oci-entrypoint-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-runner-oci-entrypoint-18.8","name":"gitlab-runner-oci-entrypoint-18.8","label":"gitlab-runner-oci-entrypoint-18.8","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-runner-oci-entrypoint-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"gitlab","name":"gitlab","label":"gitlab","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/gitlab","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"gitlab","product":"gitlab","name":"GitLab","label":"gitlab","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 17.1, < 18.6.4","noFixRecorded":false,"fixedIn":null},{"text":"≥ 18.7, < 18.7.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 18.8, < 18.8.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 17.1.0, < 18.6.4","noFixRecorded":false,"fixedIn":null},{"text":"≥ 18.7.0, < 18.7.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 18.8.0, < 18.8.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 17.1, < 18.6.4 | ≥ 18.7, < 18.7.2 | ≥ 18.8, < 18.8.2 | ≥ 17.1.0, < 18.6.4 | ≥ 18.7.0, < 18.7.2 | ≥ 18.8.0, < 18.8.2","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"gitlab","label":"GitLab","category":"server-app"}},"hubHref":"/vendor/gitlab/gitlab"}],"affectedCount":60,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/581060","label":"gitlab.com/gitlab-org/gitlab/-/issues/581060","hostname":"gitlab.com","tags":["Issue Tracking","Permissions Required","REPORT","Broken Link"]},{"url":"https://hackerone.com/reports/3418023","label":"hackerone.com/reports/3418023","hostname":"hackerone.com","tags":["Technical Description","Exploit","Permissions Required","REPORT"]},{"url":"https://about.gitlab.com/releases/2026/01/21/patch-release-gitlab-18-8-2-released/","label":"about.gitlab.com/releases/2026/01/21/patch-release-gitlab-18-8-2-released/","hostname":"about.gitlab.com","tags":["REPORT","WEB","Release Notes","Vendor Advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-13335","label":"ubuntu.com/security/CVE-2025-13335","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13335","label":"www.cve.org/CVERecord?id=CVE-2025-13335","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13335.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13335.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13335","label":"nvd.nist.gov/vuln/detail/CVE-2025-13335","hostname":"nvd.nist.gov","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-XJ46-W8PJ-PV5P"]},"timeline":[{"kind":"published","date":"2026-01-22T10:04:27.602Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-01-22T14:12:36.778Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":36,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T06:33:12.247Z","stale":false,"partial":false}}