Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: GitLab 16.10.2, 16.8.6, 16.9.4 Clear all filters
TI-2023-05947 CVE-2023-6489 · GHSA-997p-pqq2-w5f5

Inefficient Regular Expression Complexity in GitLab

Priority LOW 30

A denial of service vulnerability was identified in GitLab CE/EE, versions 16.7.7 prior to 16.8.6, 16.9 prior to 16.9.4 and 16.10 prior to 16.10.2 which allows an attacker to spike the GitLab instance resources usage res…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00606 Published 2024-04-12 Fixed in 16.8.6, 16.9.4 +1 CWE-1333
TI-2023-06108 CVE-2023-6678 · GHSA-26wq-535g-r2w5

Inefficient Regular Expression Complexity in GitLab

Priority LOW 30

An issue has been discovered in GitLab EE affecting all versions before 16.8.6, all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00586 Published 2024-04-12 Fixed in 16.8.6, 16.9.4 +1 CWE-1333