GitLab Critical Patch: High-Severity XSS and Unauthenticated DoS Flaws Hit Self-Managed Instances

GitLab released security updates (18.11.3, 18.10.6, 18.9.7) addressing multiple high-severity vulnerabilities — including several XSS flaws (many with CVSS ~8.7), unauthenticated DoS vectors, memory exhaustion via CSV parsing, authorization failures exposing private issue content, and package-protection bypasses — which could allow script execution, service outages, and unauthorized access on self-managed instances; administrators should apply the patches immediately.