CVE-2024-9631
An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, where viewing diffs of MR with conflicts can be slow.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS probability
- 0.73%
- CWE
- CWE-407
- Published
- 2025-02-05
- Last modified
- 2026-03-13
Affected products
- GitLab GitLab
- GitLab GitLab
- GitLab GitLab
Weakness type
Related vulnerabilities
- CVE-2026-87822 — t-digest 3.1 through 3.3 Denial of Service via NaN Centroid Means in MergingDigest.fromBytes
- CVE-2024-58382 — league/commonmark before 2.6.0 Denial of Service via Quadratic Complexity
- CVE-2023-54395 — PocketMine-MP before 4.12.5 Denial of Service via ModalFormResponsePacket
- CVE-2026-86435 — commonmark 1.5.0 before 2.8.4 Denial of Service via Footnote
- CVE-2026-86434 — commonmark 2.0.0 through 2.8.3 Denial of Service via Slug Collision
- CVE-2026-86433 — commonmark 1.5.0 before 2.8.4 Denial of Service via Attributes
- CVE-2026-86430 — league/commonmark before 2.9.1 Denial of Service via parsing
- CVE-2026-86429 — commonmark before 2.9.1 Denial of Service via SmartPunct and Attributes