CVE-2021-22216: GitLab

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolled resource consumption with a very long issue or merge request description

Affected products

• GitLab GitLab: before 13.10.5 (fixed in 13.10.5); from 13.11.0, before 13.11.5 (fixed in 13.11.5); from 13.12.0, before 13.12.2 (fixed in 13.12.2)

Published 2021-06-08. Last modified 2026-06-17.