---
id: CVE-2023-5963
title: Allocation of Resources Without Limits or Throttling in GitLab
summary: >-
  An issue has been discovered in GitLab EE with Advanced Search affecting all
  versions from 13.9 to 16.3.6, 16.4 prior to 16.4.2 and 16.5 prior to 16.5.1
  that could allow a denial of service in the Advanced Search function by
  chaining too…
severity: low
cvss: 3.1
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L'
cvssSource: cna
cwe:
  - CWE-770
vendor: GitLab
product: GitLab
affected:
  - GitLab >= 13.9 < 16.3.6
  - GitLab >= 16.4.0 < 16.4.2
  - GitLab >= 16.5.0 < 16.5.1
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-08-29T20:45:18.819304Z'
published: '2023-11-06'
updated: '2026-10-11'
sourceUpdated: '2026-10-11T04:17:03.445Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2023-5963'
references:
  - url: 'https://gitlab.com/gitlab-org/gitlab/-/issues/423468'
    label: 'GitLab Issue #423468'
tags:
  - cve.org
epss: 0.00484
epssPercentile: 0.40165
ingestedAt: '2026-10-15T01:08:04.253Z'
---

## Overview

An issue has been discovered in GitLab EE with Advanced Search affecting all versions from 13.9 to 16.3.6, 16.4 prior to 16.4.2 and 16.5 prior to 16.5.1 that could allow a denial of service in the Advanced Search function by chaining too many syntax operators.

## Affected

- `GitLab >= 13.9 < 16.3.6`
- `GitLab >= 16.4.0 < 16.4.2`
- `GitLab >= 16.5.0 < 16.5.1`

## Remediation

Upgrade to version 16.3.6, 16.4.2, 16.5.1 or above.