CVE-2022-0151: 
GitLab vulnerability analysis and mitigation

An issue was discovered in GitLab affecting all versions starting from 12.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, and all versions starting from 14.6.0 before 14.6.2. The vulnerability relates to incorrect handling of package deletion requests in GitLab (GitLab Security, CVE Mitre).

The vulnerability is classified as a medium severity issue with a CVSS score of 6.5 (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H). The issue stems from GitLab's improper handling of requests to delete existing packages, which could lead to table locks under specific conditions (GitLab Security).

When exploited, this vulnerability could result in a Denial of Service under specific conditions. The issue specifically affects the package deletion functionality and could cause table locks, potentially impacting system availability (GitLab Security).

The vulnerability has been fixed in GitLab versions 14.4.5, 14.5.3, and 14.6.2. Organizations running affected versions are strongly recommended to upgrade to the patched versions immediately. GitLab.com has already been updated with the patched version (GitLab Security).