GitLab 8.13 < 14.2.6 / 14.3.0 < 14.3.4 / 14.4.0 < 14.4.1 (CVE-2021-39914)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3 and 14.4.0 could cause excessive usage of resources when a specially crafted username was used when...

CVE-2021-39914

CVE-2021-39914 is a Denial of Service vulnerability in GitLab where a crafted username during user provisioning can trigger pathological backtracking in a regular expression, leading to excessive resource usage. Affected GitLab versions are 8.13 to 14.2.5, 14.3.0 to 14.3.3, and 14.4.0 (inclusive)...