GitLab Patch Release: 18.2.2, 18.1.4, 18.0.6

{
  "id": "5a07479bb5b65960588ec7c1e227bafc9597e10e7691e10e5beea0ee53c7b842",
  "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-2-2-released/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "GitLab Patch Release: 18.2.2, 18.1.4, 18.0.6",
    "summary": "GitLab released security fixes for CE and EE and recommends upgrading affected self-managed installations to a patched version. Single-node upgrades require downtime while migrations complete.",
    "evidence": "On August 13, 2025, we released versions 18.2.2, 18.1.4, 18.0.6 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately.",
    "products": [
      {
        "name": {
          "value": "GitLab CE/EE",
          "evidence": "GitLab CE/EE: all versions from 14.2 before 18.0.6, 18.1 before 18.1.4 and 18.2 before 18.2.2"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "18.2.2",
            "evidence": "18.2.2"
          },
          {
            "value": "18.1.4",
            "evidence": "18.1.4"
          },
          {
            "value": "18.0.6",
            "evidence": "18.0.6"
          }
        ],
        "affected_versions": [
          {
            "value": "all versions from 14.2 before 18.0.6, 18.1 before 18.1.4 and 18.2 before 18.2.2",
            "evidence": "GitLab CE/EE: all versions from 14.2 before 18.0.6, 18.1 before 18.1.4 and 18.2 before 18.2.2"
          },
          {
            "value": "all versions from 18.2 before 18.2.2",
            "evidence": "GitLab CE/EE: all versions from 18.2 before 18.2.2"
          },
          {
            "value": "all versions from 18.1 before 18.1.4, and 18.2 before 18.2.2",
            "evidence": "GitLab CE/EE: all versions from 18.1 before 18.1.4, and 18.2 before 18.2.2"
          },
          {
            "value": "all versions 18.0 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2",
            "evidence": "GitLab CE/EE: all versions 18.0 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2"
          },
          {
            "value": "all versions from 17.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2",
            "evidence": "GitLab CE/EE: all versions from 17.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2"
          },
          {
            "value": "all versions from 11.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2",
            "evidence": "GitLab CE/EE: all versions from 11.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2"
          },
          {
            "value": "all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2",
            "evidence": "GitLab CE/EE: all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2"
          },
          {
            "value": "all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2",
            "evidence": "GitLab CE/EE: all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2"
          },
          {
            "value": "all versions from 8.14 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2",
            "evidence": "GitLab CE/EE: all versions from 8.14 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2"
          },
          {
            "value": "all versions from 15.7 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2",
            "evidence": "GitLab CE/EE: all versions from 15.7 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2"
          }
        ]
      },
      {
        "name": {
          "value": "GitLab EE",
          "evidence": "GitLab EE: all versions from 18.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "18.2.2",
            "evidence": "18.2.2"
          },
          {
            "value": "18.1.4",
            "evidence": "18.1.4"
          },
          {
            "value": "18.0.6",
            "evidence": "18.0.6"
          }
        ],
        "affected_versions": [
          {
            "value": "all versions from 18.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2",
            "evidence": "GitLab EE: all versions from 18.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2"
          },
          {
            "value": "all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2",
            "evidence": "GitLab EE: all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2025-7734",
        "evidence": "CVE-2025-7734 - Cross-site scripting issue in blob viewer impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2025-7739",
        "evidence": "CVE-2025-7739 - Cross-site scripting issue in labels impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2025-6186",
        "evidence": "CVE-2025-6186 - Cross-site scripting issue in Workitem impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2025-8094",
        "evidence": "CVE-2025-8094 - Improper Handling of Permissions issue in project API impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2024-12303",
        "evidence": "CVE-2024-12303 - Incorrect Privilege Assignment issue in delete issues operation impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2025-2614",
        "evidence": "CVE-2025-2614 - Allocation of Resources Without Limits issue in release name creation impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2024-10219",
        "evidence": "CVE-2024-10219 - Incorrect Authorization issue in jobs API impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2025-8770",
        "evidence": "CVE-2025-8770 - Authorization issue in Merge request approval policy impacts GitLab EE"
      },
      {
        "value": "CVE-2025-2937",
        "evidence": "CVE-2025-2937 - Inefficient Regular Expression Complexity issue in wiki impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2025-1477",
        "evidence": "CVE-2025-1477 - Allocation of Resources Without Limits issue in Mattermost integration impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2025-5819",
        "evidence": "CVE-2025-5819 - Incorrect Permission Assignment issue in ID token impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2025-2498",
        "evidence": "CVE-2025-2498 - Insufficient Access Control issue in IP Restriction impacts GitLab EE"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-gitlab-security-releases",
  "document_id": 23781,
  "published_at": "2025-08-13T00:00:00+00:00"
}