Tag: GitLab
Ruby patched three regex bugs behind GitLab’s four critical CVEs
Any application that compiles a regular expression from untrusted input is exposed, not just GitLab.
A regex overflow puts every GitLab version back in scope
CVE-2026-110264 scores 10.0, reaches back to 2014 and lands one patch above the update admins applied nine days ago.
GitLab patches maximum-severity CI/CD regex bug under CVE-2026-97229
A crafted regular expression in a CI/CD file could let an unauthenticated stranger run code on a self-managed server.
GitLab rushes a fix for a sandbox escape in its AI Gateway
A signed-in Duo user could break out of a prompt template sandbox and run commands on self-hosted AI Gateway hosts,…
Anyone holding your GitLab issue email can commit code as you
Aikido Security found GitLab's per-user issue email doubles as a non-expiring token that can commit code as the account owner.
GitLab patches a 10.0 file-read flaw as scanning begins within hours
Two GitLab flaws, one a perfect 10.0, drew automated probes within hours of the patch.
Unauthenticated GraphQL injection lets strangers wipe GitLab projects
GitLab shipped emergency patches for a critical GraphQL code injection flaw that lets unauthenticated attackers modify or delete public projects.
GitLab Fixes Critical Duo AI Identity and DoS Flaws in Latest Security Patches
The emergency patches address a high severity identity spoofing flaw in AI workflow runners and a denial of service bug…