Gitlab · Gitlab Ce/Ee · CVE-2022-0489
**Name of the Vulnerable Software and Affected Versions**
GitLab CE/EE versions 8.15 and later
**Description**
An issue has been discovered in GitLab CE/EE that allows a Denial of Service (DOS) to be triggered by using the math feature with a specific formula in issue comments.
**Recommendations**
For GitLab CE/EE versions 8.15 and later, consider disabling the math feature in issue comments as a temporary workaround until a patch is available. Restrict access to issue comments to minimize the risk of exploitation. Avoid using the math feature with specific formulas in issue comments until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.