GitLab not affected by Rails vulnerability CVE-2014-3483

← Back to company

Yesterday the developers of Ruby on Rails released a security advisory for SQL injection vulnerability CVE-2014-3483. GitLab is not affected by this vulnerability.

Background

CVE-2014-3483 affects applications which use PostgreSQL bitstring or range types in their database schema. GitLab uses neither of these types in its database schema.

Please contact us at support@gitlab.com if you have any questions about this issue.

GitLab not affected by Rails vulnerability CVE-2014-3483 Click to tweet!

Try all GitLab features - free for 30 days

GitLab is more than just source code management or CI/CD. It is a full software development lifecycle & DevOps tool in a single application.

Try GitLab for Free

GIT is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license

Edit this page — open Web IDE — please contribute.