CVE-2021-39942

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 12.0 through 14.3.5 GitLab CE/EE versions 14.4 through 14.4.3 GitLab CE/EE versions 14.5 through 14.5.1

Description A denial of service issue allows low-privileged users to bypass file size limits in the NPM package repository, potentially causing denial of service.

Recommendations For GitLab CE/EE versions 12.0 through 14.3.5, update to version 14.3.6 or later. For GitLab CE/EE versions 14.4 through 14.4.3, update to version 14.4.4 or later. For GitLab CE/EE versions 14.5 through 14.5.1, update to version 14.5.2 or later.