GitLab Patches Multiple Vulnerabilities that Allows Attackers to Trigger XSS and DoS Attack

GitLab released patch releases (18.6.2, 18.5.4, 18.4.6) on 2025-12-10 to fix ten vulnerabilities—four high-severity (including XSS in Wiki and Swagger UI and improper encoding in vulnerability reports, CVSS up to 8.7), several DoS flaws, and an authentication bypass affecting WebAuthn—advising all self-managed installations to upgrade immediately while noting potential downtime for single-node migrations and that GitLab.com is already patched.