CVE-2021-39907: GitLab

Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days.

A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from certain images resulted in high CPU usage.

Affected products

• GitLab GitLab: from 13.7.0, before 14.2.6 (fixed in 14.2.6); from 14.3.0, before 14.3.4 (fixed in 14.3.4); from 14.4.0, before 14.4.1 (fixed in 14.4.1)

Published 2021-11-05. Last modified 2026-06-17.