| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 16.1, < 16.1.3≥ 16.2, < 16.2.2 | 16.1.316.2.2 |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. An invalid 'start_sha' value on merge requests page may lead to Denial of Service as Changes tab would not load.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free