CVE-2021-22181: GitLab

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an attacker to create a recursive pipeline relationship and exhaust resources.

Affected products

• GitLab GitLab: from 11.8.0, before 13.10.5 (fixed in 13.10.5); from 13.11.0, before 13.11.5 (fixed in 13.11.5); from 13.12.0, before 13.12.2 (fixed in 13.12.2)

Published 2021-06-11. Last modified 2026-06-17.