CVE-2025-10868

Published: Sep 26, 2025Modified: Sep 29, 2025

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string conversion methods exhibit performance degradation with large inputs.

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 17.4.0 to 18.2.7
Gitlab Gitlab	From 18.3.0 to 18.3.3
Gitlab Gitlab	From 17.4.0 to 18.2.7
Gitlab Gitlab	From 18.3.0 to 18.3.3
Gitlab Gitlab	Version 18.4.0
Gitlab Gitlab	Version 18.4.0

Related CWEs

CWE-840

References (1)

https://gitlab.com/gitlab-org/gitlab/-/issues/526482

Source: cve@gitlab.com

Broken Link

Timeline

No history available yet.