VULNERABILITY INTELLIGENCE

CVE-2025-0290

CVSS score4.3 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2025-01-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing of CI artifacts metadata could cause background jobs to become unresponsive.

Weakness classification

  • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

Primary references