CVE-2025-1072: GitLab

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14.1 prior to 17.3.7, 17.4 prior to 17.4.4, and 17.5 prior to 17.5.2. A denial of service could occur upon importing maliciously crafted content using the Fogbugz importer.

Affected products

• GitLab GitLab: from 7.14.1, before 17.3.7 (fixed in 17.3.7); from 17.4.0, before 17.4.4 (fixed in 17.4.4); from 17.5.0, before 17.5.2 (fixed in 17.5.2); from 17.7.0, before 17.7.3 (fixed in 17.7.3)

Published 2025-02-07. Last modified 2026-06-17.