CVE Vulnerabilities

CVE-2025-10868

Published: Sep 26, 2025 | Modified: Sep 29, 2025
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string conversion methods exhibit performance degradation with large inputs.

Affected Software

Name Vendor Start Version End Version
Gitlab Gitlab 17.4.0 (including) 18.2.7 (excluding)
Gitlab Gitlab 18.3.0 (including) 18.3.3 (excluding)
Gitlab Gitlab 18.4.0 (including) 18.4.0 (including)

References