Vulnerability Bulletins

CVE-2025-3950

   
Affected software GITLAB
 
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed a user to leak certain information by referencing specially crafted images that bypass asset proxy protection.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-3950