CVE-2023-3364: GitLab

High severity, CVSS 7.5. EPSS: 44.5% chance of exploitation in the next 30 days.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible via sending crafted payloads which use AutolinkFilter to the preview_markdown endpoint.

Affected products

• GitLab GitLab: from 8.14, before 16.0.8 (fixed in 16.0.8); from 16.1, before 16.1.3 (fixed in 16.1.3); from 16.2, before 16.2.2 (fixed in 16.2.2)

Published 2023-08-02. Last modified 2026-06-17.