| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 14.8.0, < 14.8.5≥ 14.9.0, < 14.9.2< 14.7.7 | 14.8.514.9.214.7.7 |
A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an attacker to cause unlimited resource consumption.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free