CVE-2025-0290

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-0290
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-0290.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-0290
Aliases
Downstream
Related
Published
2025-01-28T08:45:09.560Z
Modified
2026-04-10T05:20:14.715652Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
Details

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing of CI artifacts metadata could cause background jobs to become unresponsive.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/0xxx/CVE-2025-0290.json",
    "cna_assigner": "GitLab",
    "cwe_ids": [
        "CWE-835"
    ]
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
3b397c1753233301037d0ca3caae23ce116505d3
Fixed
895b46185b5908d7ac6ca2bfb578950b3c31a572
Database specific 
{
    "versions": [
        {
            "introduced": "15.0"
        },
        {
            "fixed": "17.6.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
1fd574ee5710155adf5307fba45132264dcb64a1
Fixed
e2760d8d33495ca8eb675dce3fbadb28c3d31958
Database specific 
{
    "versions": [
        {
            "introduced": "17.7"
        },
        {
            "fixed": "17.7.2"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
f03594b9e09b648c839e9c008286a24c93c82373
Fixed
f03594b9e09b648c839e9c008286a24c93c82373
Database specific 
{
    "versions": [
        {
            "introduced": "17.8"
        },
        {
            "fixed": "17.8.0"
        }
    ]
}

Affected versions

v17.*
v17.7.0-ee

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-0290.json"