Threats tagged 'bit-gitlab-2024-3114'

GitLab CE/EE versions from 11.10 up to but not including 17.0.6, 17.1 up to 17.1.4, and 17.2 up to 17.2.2 contain a vulnerability where processing invalid commits can trigger a regular expression denial of service (ReDoS) attack. This uncontrolled resource consumption can degrade server performance or cause service disruption. A patch is available to address this issue.