SEKurity GmbH Logo
Home/Tags/GitLab

#GitLab

1 Article tagged

[*] Filtering articles by tag: GitLab
[+] Matching entries: 1
root@sekurity:~# ls -la /tags/gitlab/* _

CVE Research
sekurity-team

InSEKurity of the Week (CW44/2026): GitLab CI/CD Regex Integer Overflow RCE (CVE-2026-97229)

A crafted regular expression in a CI/CD configuration overflows an integer in Ruby's Onigmo regex engine and turns a GitLab Puma worker into a shell as the git user. CVSS 10.0, listed in CISA KEV on October 29, 2026, exploitation attempted against Alpine Linux's GitLab.

01

root@sekurity:~# echo "End of results for tag: GitLab"
End of results for tag: GitLab
root@sekurity:~# _