CVE-2025-9222
Fixed in a distro release EPSS <1%CVSS 8.7
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.2 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to achieve stored cross-site scripting by exploiting GitLab Flavored Markdown.
Products: GitLab, Red Hat OpenShift Pipelines, Red Hat OpenShift Container Platform 4
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | gitlab-rails-ce-18.2 | 18.2.8-r3 |
| Chainguard | gitlab-rails-ce-18.3 | 18.3.6-r2 |
| Chainguard | gitlab-rails-ce-18.4 | 18.4.6-r1 |
| Chainguard | gitlab-rails-ce-assets-18.2 | 18.2.8-r3 |
| Chainguard | gitlab-rails-ce-assets-18.3 | 18.3.6-r2 |
| Chainguard | gitlab-rails-ce-assets-fips-18.2 | 18.2.8-r4 |
| Chainguard | gitlab-rails-ce-assets-fips-18.3 | 18.3.6-r2 |
| Chainguard | gitlab-rails-ce-assets-fips-18.4 | 18.4.6-r1 |
| Chainguard | gitlab-rails-ce-doc-18.2 | 18.2.8-r3 |
| Chainguard | gitlab-rails-ce-doc-18.3 | 18.3.6-r2 |
| Chainguard | gitlab-rails-ce-doc-18.4 | 18.4.6-r1 |
| Chainguard | gitlab-rails-ce-doc-fips-18.2 | 18.2.8-r4 |
| Chainguard | gitlab-rails-ce-doc-fips-18.3 | 18.3.6-r2 |
| Chainguard | gitlab-rails-ce-doc-fips-18.4 | 18.4.6-r1 |
| Chainguard | gitlab-rails-ce-fips-18.2 | 18.2.8-r4 |
| Chainguard | gitlab-rails-ce-fips-18.3 | 18.3.6-r2 |
| Chainguard | gitlab-rails-ce-fips-18.4 | 18.4.6-r1 |
| Chainguard | gitlab-workhorse-ce-18.2 | 18.2.8-r3 |
| Chainguard | gitlab-workhorse-ce-18.3 | 18.3.6-r2 |
| Chainguard | gitlab-workhorse-ce-18.4 | 18.4.6-r0 |
| Chainguard | gitlab-workhorse-ce-fips-18.2 | 18.2.8-r3 |