CVE-2024-4025: GitLab

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions from 7.10 prior before 16.11.5, version 17.0 before 17.0.3, and 17.1 before 17.1.1. It is possible for an attacker to cause a denial of service using a crafted markdown page.

Affected products

• GitLab GitLab: from 7.10.0, before 16.11.5 (fixed in 16.11.5); from 17.0.0, before 17.0.3 (fixed in 17.0.3); version 17.1.0 only

Published 2025-06-20. Last modified 2026-06-17.