CVE-2025-0290

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing of CI artifacts metadata could cause background jobs to become unresponsive.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-835

Affected software

No affected versions have been published.

Timeline

Published: Jan 28, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-02918.8Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra CVE-2025-02924.9SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacke CVE-2025-02932.7CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticat CVE-2025-02948.8A vulnerability has been found in SourceCodester Home Clean Services Management System 1.0 and classified as critical. Affected by this vuln CVE-2025-02955.4A vulnerability was found in code-projects Online Book Shop 1.0 and classified as problematic. Affected by this issue is some unknown functi CVE-2025-02969.8A vulnerability was found in code-projects Online Book Shop 1.0. It has been classified as critical. This affects an unknown part of the fil CVE-2025-02976.3A vulnerability was found in code-projects Online Book Shop 1.0. It has been declared as critical. This vulnerability affects unknown code o CVE-2025-02989.8A vulnerability was found in code-projects Online Book Shop 1.0. It has been rated as critical. This issue affects some unknown processing o CVE-2025-02999.8A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /se CVE-2025-03008.8A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functio CVE-2025-03016.1A vulnerability, which was classified as problematic, has been found in code-projects Online Book Shop 1.0. Affected by this issue is some u CVE-2025-03025.5in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through integer overflow.