CVE-2022-4205: GitLab

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash.

Affected products

• GitLab GitLab: from 1.0.0, before 12.9.8 (fixed in 12.9.8); from 15.5.0, before 15.5.5 (fixed in 15.5.5); version 15.6.0 only

Published 2023-01-27. Last modified 2026-06-17.