CVE-2025-10868 in Community Edition

Resumen

por MITRE • 2025-09-26

An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string conversion methods exhibit performance degradation with large inputs.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: GitLab
• Reservar: 2025-09-23
• Divulgación: 2025-09-26
• Moderación: aceptado
• Artículo: VDB-326089
• CPE: listo
• CWE: CWE-840 (confirmado)
• CVSS: 5.3 (NVD)
• EPSS: 0.00238
• KEV: no
• Actividades: muy bajo
• Sector: Pharma, Chemical, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-10868
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-10868
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-10868/