CVE-2026-1069
Uncontrolled Recursion in GitLab
Summary
Uncontrolled Recursion in GitLab
Original description
The description as published by the source.
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service by sending specially crafted GraphQL requests due to uncontrolled recursion under certain circumstances.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"18.9.0"},{"fixed":"18.9.2"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report hackerone.com
- web about.gitlab.com
- web gitlab.com