HarborGuard / CVE
Back to search
HIGHCVE-2026-1662Published Modified CNA GitLab

CVE-2026-1662: Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denial of Service by sending specially crafted requests to the Jira events endpoint.

Metrics

CVSS v3.1
7.5
Severity
HIGH
Fixed in
18.7.5
Affected Products
1

Fix available

18.7.518.8.518.9.1
Affected packages
  • GitLab / GitLab
    < 18.7.5 (from 14.4) · < 18.8.5 (from 18.8) · < 18.9.1 (from 18.9)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References