CVE-2020-26414
CVE-2020-26414
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
An issue has been discovered in GitLab affecting all versions starting from 12.4. The regex used for package names is written in a way that makes execution time have quadratic growth based on the length of the malicious input string.
CVSS 4.3 · Media · EPSS 1,6%
- Publicación
- Actualización
Pila tecnológica: system