CVE Vulnerabilities

CVE-2025-10868

Published: Sep 26, 2025 | Modified: Sep 29, 2025
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string conversion methods exhibit performance degradation with large inputs.

Affected Software

NameVendorStart VersionEnd Version
GitlabGitlab17.4.0 (including)18.2.7 (excluding)
GitlabGitlab18.3.0 (including)18.3.3 (excluding)
GitlabGitlab18.4.0 (including)18.4.0 (including)

References