VDB

CESS-2025-10868

CESS-2025-10868 PUBLISHED CVSS 5.3 MEDIUM

An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string conversion methods exhibit performance degradation with large inputs.

Risk Scores

CVSS 3.1
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Timeline

  • Sep 26, 2025 CVE Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›