Data breachcritical
GitLab addressed critical auth bypass flaws in CE and EE)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-25292+1 related CVE | Authentication Bypass (Signature Wrapping) in ruby-saml via XML Parser Differential | 9.3 | 65% | PoC ×2 | |
| CVE-2025-27407 | graphql-ruby is a Ruby implementation of GraphQL | 9.0 | 3% |
From the original article
2 min read at securityaffairs.com
GitLab addressed two critical authentication bypass vulnerabilities in Community Edition (CE) and Enterprise Edition (EE). GitLab released security updates to address critical vulnerabilities in Community Edition (CE) and Enterprise Edition (EE). The company addressed nine vulnerabilities, including the two critical ruby-saml authentication bypass issues respectively tracked as CVE-2025-25291 and CVE-2025-25292.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.