CVE-2025-10004 | GitLab Community Edition/Enterprise Edition up to 18.2.7/18.3.3/18.4.1 GraphQL allocation of resources (Patch 568121 / EUVD-2025-33334)

October 9, 2025 Yanac

A vulnerability marked as problematic has been reported in GitLab Community Edition and Enterprise Edition up to 18.2.7/18.3.3/18.4.1. Affected by this vulnerability is an unknown functionality of the component GraphQL Handler. Performing manipulation results in allocation of resources.

This vulnerability was named CVE-2025-10004. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More