Security Advisory

CVE-2025-3950

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-09 10:04:51
Last updated 2026-01-09 14:42:21
Assigner GitLab
State PUBLISHED

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed a user to leak certain information by referencing specially crafted images that bypass asset proxy protection.