What is the CVSS score of CVE-2025-14513?

CVE-2025-14513 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Gitlab are affected by CVE-2025-14513?

A high-severity vulnerability (CVSS 7.5) affecting GitLab CE/EE versions 16.11 through 18.7.6 has been identified with no patch currently available.

How to fix or mitigate CVE-2025-14513?

Within 24 hours: Verify all GitLab instances and document affected versions; restrict GitLab access to trusted networks only and increase monitoring for suspicious activity. Within 7 days: Contact GitLab support for patch timelines and interim guidance; implement network segmentation to limit lateral movement if GitLab is compromised. Within 30 days: Apply the vendor patch immediately upon release; conduct security audit of GitLab access logs and repository activity for indicators of compromise.

Gitlab CVE-2025-14513

HIGH

Improper Validation of Specified Quantity in Input (CWE-1284)

2026-03-11 cve@gitlab.com

Gitlab Denial Of Service

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:06 vuln.today

CVE Published

Mar 11, 2026 - 16:16 nvd

HIGH 7.5

DescriptionCVE.org

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service condition due to improper input validation when processing specially crafted JSON payloads in the protected branches API.

AnalysisAI

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 versions up to 18.7.6 contains a security vulnerability (CVSS 7.5).

Technical ContextAI

affects GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11. GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service condition due to improper input validation when processing specially crafted JSON payloads in the protected branches API.