GitLab Urges Immediate Patching for Critical Regex Compiler Flaw
GitLab released emergency patches on October 8 for a maximum-severity vulnerability (CVE-2026-97229) in its CI/CD regular expression compiler. The flaw, rated 10.0 on the CVSS scale, allows unauthenticated attackers to execute arbitrary code via specially crafted regex inputs. Self-managed users must upgrade to versions 19.2.8, 19.3.4, or 19.4.2 immediately; cloud-hosted instances are already patched.