GitLab CE/EE Denial-of-Service Vulnerability Due to Excessive Memory Consumption

Vulnerability

A denial-of-service vulnerability has been addressed in GitLab CE/EE versions 8.3 prior to 18.9.7, 18.10 prior to 18.10.6, and 18.11 prior to 18.11.3. The issue allowed authenticated users to cause excessive memory consumption through improper input validation, leading to service disruption.

Impact

Exploitation of this vulnerability could cause excessive memory usage, leading to a denial-of-service condition where the application becomes unresponsive or unavailable.

Added: May 14, 2026, 6:41 AM
Updated: May 14, 2026, 6:41 AM

Vulnerability Rating

Custom Algorithm
spread
7.3
impact
2.5
exploitability
6.6
remediation
7.7
relevance
8.3
threat
6.4
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.