GitLab Patches Max-Severity Vulnerability CVE-2026-97229
ID: 67d7b2fe-6262-512b-a0b9-e50dba8e3e38
STIX ID: report--67d7b2fe-6262-512b-a0b9-e50dba8e3e38
Feed Name: Security Affairs
Threat Score
GitLab patched a critical vulnerability (CVE-2026-97229, CVSS 10.0) — an integer overflow caused by weak regular-expression validation in CI/CD configs that could allow unauthenticated remote code execution — affecting Community and Enterprise editions (versions prior to 19.2.8, 19.3.5, 19.4.2); administrators are urged to upgrade. The advisory also lists additional high-severity CVEs (CVE-2026-92883, CVE-2026-16301, CVE-2026-14814) and a separate AI Gateway issue (CVE-2026-90970) that were fixed.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.