CVE-2025-0290

MEDIUM Year: 2025
CVSS v3 Score
4.3
Medium
Weakness Type
CWE-835
View all →

Vulnerability Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing of CI artifacts metadata could cause background jobs to become unresponsive.

Related Vulnerabilities

CVE-2021-22197

MEDIUM
CVSS:4.3(Medium)

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when an authenticated user with specific rights access a MR having source and target...

CWE-8352021

CVE-2024-55565

MEDIUM
CVSS:4.3(Medium)

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

CWE-8352024

CVE-2024-5949

MEDIUM
CVSS:4.3(Medium)

Deep Sea Electronics DSE855 Multipart Boundary Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected i...

CWE-8352024

CVE-2024-6614

MEDIUM
CVSS:4.3(Medium)

The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 and Thunderbird < 128.

CWE-8352024

CVE-2019-3819

MEDIUM
CVSS:4.2(Medium)

A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local p...

CWE-8352019

CVE-2016-4453

MEDIUM
CVSS:4.4(Medium)

The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command.

CWE-8352016