Description
An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string conversion methods exhibit performance degradation with large inputs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GitLab | GitLab | 17.4 – < 18.2.7, 18.3 – < 18.3.3, 18.4 – < 18.4.1 | 18.2.7 |
Advisories 2
- WID-SEC-2025-2140 GitLab: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 27, 2025
- NCSC-2025-0300 Kwetsbaarheden verholpen in GitLab EE & CE NCSC-NL (Netherlands) · Sep 29, 2025
References
- GitLab Issue #526482 issue-tracking permissions-required