GitLab Remote Code Execution - Integer Overflow issue

1. #0110.21
   Initial2026-10-21 19:01 · publication time

   GitLab Remote Code Execution - Integer Overflow issue

   GitLab released patch 19.5.1 addressing an integer-overflow vulnerability that could enable remote code execution, with community discussion emphasizing its severity and unauthenticated attack surface.

   Source evidence: artooro

2. #0210.28
   Escalation2026-10-28 23:45 · publication time

   GitLab Security Incident: Attempted Exploitation of CVE-2026-97229

   Alpine Linux disclosed an attempted exploitation of CVE-2026-97229, an integer-overflow remote code execution flaw in Ruby's regular expression engine that GitLab only patches in its own packages, leaving source-built images on version 19.3.6 vulnerable until the image was rebuilt with Ruby 3.3.13 on October 27.

   Source evidence: sashk

All events · Back to the feed