GitLab Patch: Fixes CI/CD Credential Theft & Unauthenticated DoS Attacks

GitLab has released a critical security update addressing multiple high-severity vulnerabilities in both its Community Edition (CE) and Enterprise Edition (EE). Key vulnerabilities include CVE-2024-9183, a race condition in the CI/CD cache leading to privilege escalation (CVSS 7.7), and CVE-2025-12571, a Denial of Service flaw in JSON input validation that does not require user authentication (CVSS 7.5).

Additionally, CVE-2025-12653 allows unauthenticated users to join organizations by altering request headers (CVSS 6.5). Other notable fixes include CVE-2025-7449 (DoS flaw, CVSS 6.5) and CVE-2025-6195 (improper authorization, CVSS 4.3). GitLab urges users to upgrade to versions 18.6.1, 18.5.3, or 18.4.5 to mitigate these risks.