Skip to content
Heist/ feed
Back to feed
UnratedFix available

GitLab Patch Release: 18.8.2, 18.7.2, 18.6.4

Type: patchSources: GitLab patch releases

GitLab released security fixes in versions 18.8.2, 18.7.2, and 18.6.4 for Community Edition and Enterprise Edition. The announcement recommends upgrading affected self-managed installations.

Products
GitLab Community Edition (CE) and Enterprise Edition (EE)
Affected versions
all versions from 11.9 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2, all versions from 12.3 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2, all versions from 17.1 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2, all versions from 17.7 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2, all versions from 18.6 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2
Fixed versions
18.6.4, 18.7.2, 18.8.2
CVEs
CVE-2025-13335, CVE-2025-13927, CVE-2025-13928, CVE-2026-0723, CVE-2026-1102
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 02:28 UTC · Revision 1

Source evidence

GitLab Patch Release: 18.8.2, 18.7.2, 18.6.4

official-gitlab-security-releases · Original source

Published 21 Jan 2026, 00:00 UTC

GitLab released security fixes in versions 18.8.2, 18.7.2, and 18.6.4 for Community Edition and Enterprise Edition. The announcement recommends upgrading affected self-managed installations.

On January 21, 2026, we released versions 18.8.2, 18.7.2, 18.6.4 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes

GitLab Community Edition (CE) and Enterprise Edition (EE)

Fixed versions: 18.8.2, 18.7.2, 18.6.4

Prerequisites: all self-managed GitLab installations

Complete source record
{
  "id": "b682715ceaa60a94e4281ec9d1d00c7b2f63dcbc30cc9ca2b4579d3bb69c299f",
  "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-8-2-released/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "GitLab Patch Release: 18.8.2, 18.7.2, 18.6.4",
    "summary": "GitLab released security fixes in versions 18.8.2, 18.7.2, and 18.6.4 for Community Edition and Enterprise Edition. The announcement recommends upgrading affected self-managed installations.",
    "evidence": "On January 21, 2026, we released versions 18.8.2, 18.7.2, 18.6.4 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes",
    "products": [
      {
        "name": {
          "value": "GitLab Community Edition (CE) and Enterprise Edition (EE)",
          "evidence": "GitLab Community Edition (CE) and Enterprise Edition (EE)"
        },
        "prerequisites": [
          {
            "value": "all self-managed GitLab installations",
            "evidence": "we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately"
          }
        ],
        "fixed_versions": [
          {
            "value": "18.8.2",
            "evidence": "we released versions 18.8.2, 18.7.2, 18.6.4"
          },
          {
            "value": "18.7.2",
            "evidence": "we released versions 18.8.2, 18.7.2, 18.6.4"
          },
          {
            "value": "18.6.4",
            "evidence": "we released versions 18.8.2, 18.7.2, 18.6.4"
          }
        ],
        "affected_versions": [
          {
            "value": "all versions from 11.9 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2",
            "evidence": "Impacted Versions: GitLab CE/EE: all versions from 11.9 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2"
          },
          {
            "value": "all versions from 17.7 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2",
            "evidence": "Impacted Versions: GitLab CE/EE: all versions from 17.7 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2"
          },
          {
            "value": "all versions from 18.6 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2",
            "evidence": "Impacted Versions: GitLab CE/EE: all versions from 18.6 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2"
          },
          {
            "value": "all versions from 17.1 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2",
            "evidence": "Impacted Versions: GitLab CE/EE: all versions from 17.1 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2"
          },
          {
            "value": "all versions from 12.3 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2",
            "evidence": "Impacted Versions: GitLab CE/EE: all versions from 12.3 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2025-13927",
        "evidence": "CVE-2025-13927 - Denial of Service issue in Jira Connect integration impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2025-13928",
        "evidence": "CVE-2025-13928 - Incorrect Authorization issue in Releases API impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-0723",
        "evidence": "CVE-2026-0723 - Unchecked Return Value issue in authentication services impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2025-13335",
        "evidence": "CVE-2025-13335 - Infinite Loop issue in Wiki redirects impacts GitLab CE/EE"
      },
      {
        "value": "CVE-2026-1102",
        "evidence": "CVE-2026-1102 - Denial of Service issue in API endpoint impacts GitLab CE/EE"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-gitlab-security-releases",
  "document_id": 23766,
  "published_at": "2026-01-21T00:00:00+00:00"
}