Simon Tomlinson

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 12.10 through 18.8.8, 18.9 through 18.9.4, and 18.10 through 18.10.2 Description A flaw exists in GitLab CE/EE that allows an unauthenticated user to cause a denial of service. This is due to improper input validation of JSON payloads. Recommendations Update to GitLab CE/EE version 18.8.9 or later. Update to GitLab CE/EE version 18.9.5 or later. Update to GitLab CE/EE version 18.10.3 or later.