Threats tagged 'bit-gitlab-2026-0752'

A cross-site scripting (XSS) vulnerability was identified in GitLab CE/EE affecting versions from 16.2 up to but not including 18.7.5, 18.8 up to but not including 18.8.5, and 18.9 up to but not including 18.9.1. This vulnerability could allow an unauthenticated user to inject arbitrary scripts into the Mermaid sandbox UI under certain conditions. GitLab has released patches to remediate this issue.