CVE-2019-13010: GitLab

Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in GitLab Enterprise Edition 8.3 through 12.0.2. The color codes decoder was vulnerable to a resource depletion attack if specific formats were used. It allows Uncontrolled Resource Consumption.

Affected products

• GitLab GitLab: from 8.3.0, up to and including 12.0.2

Published 2020-03-10. Last modified 2026-06-17.