CVE-2023-3424: GitLab

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.3 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1. A Regular Expression Denial of Service was possible via sending crafted payloads to the preview_markdown endpoint.

Affected products

• GitLab GitLab: from 10.3.0, before 15.11.10 (fixed in 15.11.10); from 16.0.0, before 16.0.6 (fixed in 16.0.6); from 16.1.0, before 16.1.1 (fixed in 16.1.1)

Published 2023-07-13. Last modified 2026-06-17.