CVE-2025-1198
An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long-lived connections in ActionCable potentially allowed revoked Personal Access Tokens access to streaming results.
| Software | From | Fixed in |
|---|---|---|
| gitlab / gitlab | 17.7.0 | 17.7.4 |
| gitlab / gitlab | 17.8.0 | 17.8.2 |
| gitlab / gitlab | 16.11.0 | 17.6.5 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime