← Database

CVE-2025-3950

LOW CVSS: 3.5 Published: 2026-01-09 Modified: 2026-06-17

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed a user to leak certain information by referencing specially crafted images that bypass asset proxy protection.

Affected Platforms

Gitlab Gitlab

Weakness Type

CWE-359

References