CVE-2021-22217: GitLab

Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.

A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolled resource consumption with a specially crafted issue or merge request

Affected products

• GitLab GitLab: before 13.10.5 (fixed in 13.10.5); from 13.11, before 13.11.5 (fixed in 13.11.5); from 13.12, before 13.12.2 (fixed in 13.12.2)

Published 2021-06-08. Last modified 2026-06-17.