Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
Cybersecurity Classified by Officially
On October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by joaxcar. GitLab assigned it a CVSS score of 10.0 and described possible code execution by an unauthenticated user. …
This is an extract. The publication continues at the source.
Read the original at the source: https://www.rapid7.com/blog/post/ra-gitlab-ci-cd-regex-integer-overflow-technical-analysis-cve-2026-97229
Officially imported this from Rapid7’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.
Provenance
- Organization
- Rapid7 — imported from official source
- Official source
- https://blog.rapid7.com/rss/ RSS
- Imported
- October 16, 2026 15:02
- Versions
- 1 recorded
- Identity
-
bltbfdc07fba418329d