GitLab CE/EE Denial-of-Service Vulnerability via Malicious JSON Payloads

A denial-of-service vulnerability has been addressed in GitLab CE/EE versions 17.10 prior to 18.4.5, 18.5 prior to 18.5.3, and 18.6 prior to 18.6.1. The issue could have allowed an unauthenticated user to disrupt service by sending specially crafted requests with harmful JSON payloads.

Impact

Exploitation of this vulnerability could lead to a denial-of-service condition, causing a disruption in service availability.