Home/Tags/DevSecOps

#DevSecOps

1 Article tagged

[*] Filtering articles by tag: DevSecOps
[+] Matching entries: 1
root@sekurity:~# ls -la /tags/devsecops/* _

[?] Related tags:

#InSEKurity #CVE #GitLab #GitLab CE/EE #Remote Code Execution

CVE Research

Nov 3, 2026

sekurity-team

InSEKurity of the Week (CW44/2026): GitLab CI/CD Regex Integer Overflow RCE (CVE-2026-97229)

A crafted regular expression in a CI/CD configuration overflows an integer in Ruby's Onigmo regex engine and turns a GitLab Puma worker into a shell as the git user. CVSS 10.0, listed in CISA KEV on October 29, 2026, exploitation attempted against Alpine Linux's GitLab.

#InSEKurity #CVE #GitLab+7

Exploit

root@sekurity:~# echo "End of results for tag: DevSecOps"
End of results for tag: DevSecOps
root@sekurity:~# _