CVE-2022-1100

CVE-2022-1100 affects GitLab CE/EE. A regex backtracking issue in the asset-update API for links from a release can cause exponential backtracking, yielding high CPU usage and potential DoS for affected installations. Affected versions are GitLab from 13.1 up to, but not including, 14.7.7; 14.8.x...