A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 15.9 before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. It is possible for an attacker to cause catastrophic backtracking while parsing results from Elasticsearch.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gitlab Gitlab | — | Upgrade Gitlab to the latest version | Apr 22, 2025 | Aug 8, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub