CVE-2025-11224 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti

CVE ID : CVE-2025-11224 Published : Jan. 14, 2026, 7:16 p.m. | 28 minutes ago Description : GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to execute stored cross-site scripting through improper input validation in the Kubernetes proxy functionality. Severity: 7.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor