CVE-2021-22177: GitLab

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command.

Affected products

• GitLab GitLab: from 12.6.0, before 13.6.7 (fixed in 13.6.7); from 13.7.0, before 13.7.7 (fixed in 13.7.7); from 13.8.0, before 13.8.4 (fixed in 13.8.4)

Published 2021-04-01. Last modified 2026-06-17.