GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to cause a denial of service condition by submitting specially crafted markdown content with nested formatting patterns.
{
"cna_assigner": "GitLab",
"cwe_ids": [
"CWE-789"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/12xxx/CVE-2025-12983.json"
}{
"extracted_events": [
{
"range": [
{
"introduced": "16.9"
},
{
"fixed": "18.3.6"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
},
{
"range": [
{
"introduced": "18.4"
},
{
"fixed": "18.4.4"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
},
{
"range": [
{
"introduced": "18.5"
},
{
"fixed": "18.5.2"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
}
]
}