| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 12.4.0, < 13.5.6≥ 13.6.0, < 13.6.4≥ 13.7.0, < 13.7.2 | 13.5.613.6.413.7.2 |
An issue has been discovered in GitLab affecting all versions starting from 12.4. The regex used for package names is written in a way that makes execution time have quadratic growth based on the length of the malicious input string.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free