Index

Search

Search the public record. Drafts and scheduled notes are not included.

news

GitLab CI regex compiler RCE is CVE-2026-97229

GitLab’s 12 October 2026 critical patch release fixes CVE-2026-97229, a CVSS 10.0 integer overflow in the CI/CD regular expression compiler that can, under certain conditions, allow unauthenticated code execution. Fixed in 19.2.8, 19.3.5, and 19.4.2. GitLab.com and Dedicated already patched. Not in CISA KEV.

Published 5h ago

CriticalPoC Available

CVE-2026-97229

GitLab CI/CD regex compiler unauthenticated code execution

RCE

Published 2d ago