If you operate GitLab in-house, there is a vulnerability you should check today: CVE-2026-97229. It is an integer overflow vulnerability in the CI/CD regular expression compiler, fixed in a critical ...
GitLab fixes CVE-2026-110264, a critical flaw that could allow unauthenticated code execution on self-managed versions dating back to 7.0.
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers.