GitLab Patch Release: 18.11.1, 18.10.4, 18.9.6

{
  "id": "e64851a5c1da541b0f5698a4b5ca91831b7d78a6df842b7ceb9fc862c29fff33",
  "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-11-1-released/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "GitLab Patch Release: 18.11.1, 18.10.4, 18.9.6",
    "summary": "GitLab released security fixes in GitLab CE/EE versions 18.11.1, 18.10.4, and 18.9.6 and recommends upgrading affected installations. The announcement lists multiple security issues with severity labels from High to Low.",
    "evidence": "On April 22, 2026, we released versions 18.11.1, 18.10.4, 18.9.6 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately.",
    "products": [
      {
        "name": {
          "value": "GitLab Community Edition (CE) and Enterprise Edition (EE)",
          "evidence": "On April 22, 2026, we released versions 18.11.1, 18.10.4, 18.9.6 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "18.11.1",
            "evidence": "On April 22, 2026, we released versions 18.11.1, 18.10.4, 18.9.6 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          },
          {
            "value": "18.10.4",
            "evidence": "On April 22, 2026, we released versions 18.11.1, 18.10.4, 18.9.6 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          },
          {
            "value": "18.9.6",
            "evidence": "On April 22, 2026, we released versions 18.11.1, 18.10.4, 18.9.6 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          }
        ],
        "affected_versions": [
          {
            "value": "all versions from 17.0 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1",
            "evidence": "Impacted Versions: GitLab CE/EE: all versions from 17.0 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-4922",
        "evidence": "CVE-2026-4922 - Cross-Site Request Forgery issue in GraphQL API impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-5816",
        "evidence": "CVE-2026-5816 - Improper Resolution of Path Equivalence issue in Web IDE asset impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-5262",
        "evidence": "CVE-2026-5262 - Cross-site Scripting issue in Storybook impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2025-0186",
        "evidence": "CVE-2025-0186 - Denial of Service issue in discussions endpoint impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-1660",
        "evidence": "CVE-2026-1660 - Denial of Service issue in Jira import impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2025-6016",
        "evidence": "CVE-2025-6016 - Denial of Service issue in notes endpoint impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2025-3922",
        "evidence": "CVE-2025-3922 - Denial of Service issue in GraphQL API impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-6515",
        "evidence": "CVE-2026-6515 - Insufficient Session Expiration issue in virtual registry credentials validation impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-5377",
        "evidence": "CVE-2026-5377 - Improper Access Control issue in issue description renderer impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-3254",
        "evidence": "CVE-2026-3254 - Improper Restriction of Rendered UI Layers or Frames issue in Mermaid sandbox impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2025-9957",
        "evidence": "CVE-2025-9957 - Improper Access Control issue in project fork relationship API impacts GitLab CE/EE"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-gitlab-security-releases",
  "document_id": 23760,
  "published_at": "2026-04-22T00:00:00+00:00"
}