GitLab Vulnerabilities Let Attackers Execute Actions by Injecting Malicious Content

**Executive Summary:** GitLab released urgent patches (18.1.2, 18.0.4, 17.11.6) to fix a high-severity XSS (CVE-2025-6948, CVSS 8.7) and multiple authorization-bypass vulnerabilities affecting many versions (13.3+ through 18.1); administrators of self-managed instances should upgrade immediately to mitigate potential account takeover or unauthorized actions.