CVE-2021-39912: GitLab

Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days.

A potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a malformed TIFF images was possible to trigger memory exhaustion.

Affected products

• GitLab GitLab: from 13.7.0, before 14.2.6 (fixed in 14.2.6); from 14.3.0, before 14.3.4 (fixed in 14.3.4); from 14.4.0, before 14.4.1 (fixed in 14.4.1)

Published 2021-11-05. Last modified 2026-06-17.