Servers and applications
CVE-2025-14595
GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that under certain conditions could have allowed an authenticated user with Planner role to view security category metadata and attributes in group security configuration due to improper access control
- Severity
- Medium 4.3
- Published
- 25 Mar 2026
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 18.8.7, 18.9.3
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
GitLabServers and applications · cpe:a:gitlab:gitlab |
|