GitLab Patches Multiple Flaws Allowing Arbitrary Code Execution 

GitLab released patch updates (18.7.1, 18.6.3, 18.5.5) addressing multiple vulnerabilities—most notably high-severity stored and reflected XSS, missing authorization in AI/Duo workflows, DoS and information disclosure—affecting self‑managed instances; administrators are urged to apply the patches promptly and follow upgrade guidance (including expected downtime for singlenode and zero-downtime procedures for multinode) to mitigate integrity, confidentiality, and availability risks.