VYPR
← All advisories
High severity7.5NVD Advisory· Published Feb 5, 2025· Updated Jun 17, 2026

CVE-2024-9631

CVE-2024-9631

Description

An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, where viewing diffs of MR with conflicts can be slow.

Affected products

6
  • GitLab Inc./GitLabllm-fuzzy4 versions
    13.6 - 17.2.8, 17.3 - 17.3.4, 17.4 - 17.4.1+ 3 more
    • (no CPE)range: 13.6 - 17.2.8, 17.3 - 17.3.4, 17.4 - 17.4.1
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 13.6
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=13.6.0,<17.2.9
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=13.6.0,<17.2.9
  • GitLab Inc./gitlab-org/gitlab-eellm-fuzzy
    Range: 13.6 - 17.2.8, 17.3 - 17.3.4, 17.4 - 17.4.1
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 13.6.0, < 17.4.2

Patches

Vulnerability mechanics

References

2

News mentions

1