Threats tagged 'bit-gitlab-2026-6073'

A cross-site scripting (XSS) vulnerability in GitLab EE versions from 18.7 up to but not including 18.9.7, 18.10 up to but not including 18.10.6, and 18.11 up to but not including 18.11.3 allows an authenticated user to execute arbitrary JavaScript in other users' browsers due to improper input sanitization. This issue has been remediated in the specified fixed versions.