An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed an authenticated user to cause a denial of service condition by creating specially crafted content that consumes excessive server resources when processed.
2025-08-13T18:15:30.843
2025-08-15T16:30:52.027
Analyzed
CVSSv3.1: 6.5 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | gitlab | gitlab | < 18.0.6 | Yes |
| Application | gitlab | gitlab | < 18.0.6 | Yes |
| Application | gitlab | gitlab | < 18.1.4 | Yes |
| Application | gitlab | gitlab | < 18.1.4 | Yes |
| Application | gitlab | gitlab | < 18.2.2 | Yes |
| Application | gitlab | gitlab | < 18.2.2 | Yes |