CVE-2021-39940 log

Severity Medium
Remote Yes
Type Denial of service
An issue has been discovered in GitLab before version 14.5.2. GitLab Maven Package registry is vulnerable to a regular expression denial of service when a specifically crafted string is sent.
Group Package Affected Fixed Severity Status Ticket
AVG-2603 gitlab 14.5.0-1 14.5.2-1 High Fixed
Date Advisory Group Package Severity Type
11 Dec 2021 ASA-202112-10 AVG-2603 gitlab High multiple issues