SEKurity GmbH Logo
Home/Tags/GitLab CE/EE

#GitLab CE/EE

1 Article tagged

[*] Filtering articles by tag: GitLab CE/EE
[+] Matching entries: 1
root@sekurity:~# ls -la /tags/gitlab-ce-ee/* _

CVE Research
sekurity-team

InSEKurity of the Week (CW44/2026): GitLab CI/CD Regex Integer Overflow RCE (CVE-2026-97229)

A crafted regular expression in a CI/CD configuration overflows an integer in Ruby's Onigmo regex engine and turns a GitLab Puma worker into a shell as the git user. CVSS 10.0, listed in CISA KEV on October 29, 2026, exploitation attempted against Alpine Linux's GitLab.

01

root@sekurity:~# echo "End of results for tag: GitLab CE/EE"
End of results for tag: GitLab CE/EE
root@sekurity:~# _