gitlab

2 stories

Oct 24, 2026

Ruby Releases Critical Regex Bug Patches After GitLab RCE Exploits

Ruby released versions 4.0.9, 3.4.12, and 3.3.13 to patch a critical ruby regex bug in the Onigmo engine affecting GitLab instances.

Oct 22, 2026

GitLab Integer Overflow RCE Affects All Self-Managed Releases Since 2014

A CVSS 10.0 flaw in GitLab’s regex engine lets unauthenticated users run code on self-managed servers from 7.0 onward. Immediate patching is required.