How to fix CVE-2025-14513?

Within 24 hours: Verify all GitLab instances and document affected versions; restrict GitLab access to trusted networks only and increase monitoring for suspicious activity. Within 7 days: Contact GitLab support for patch timelines and interim guidance; implement network segmentation to limit lateral movement if GitLab is compromised. Within 30 days: Apply the vendor patch immediately upon release; conduct security audit of GitLab access logs and repository activity for indicators of compromise.

Is Gitlab affected by CVE-2025-14513?

A high-severity vulnerability (CVSS 7.5) affecting GitLab CE/EE versions 16.11 through 18.7.6 has been identified with no patch currently available.

CVE-2025-14513

HIGH

2026-03-11 [email protected]

7.5

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:06 vuln.today

CVE Published

Mar 11, 2026 - 16:16 nvd

HIGH 7.5

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service condition due to improper input validation when processing specially crafted JSON payloads in the protected branches API.

Analysis

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 versions up to 18.7.6 contains a security vulnerability (CVSS 7.5).

Technical Context

affects GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11. GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service condition due to improper input validation when processing specially crafted JSON payloads in the protected branches API.

Affected Products

Product: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11. Versions: up to 18.7.6.

Remediation

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.0

CVSS: +38

POC: 0

CVE-2025-14513 vulnerability details – vuln.today

Back

CVE-2025-14513

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

CVE-2025-14513

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

External POC / Exploit Code