Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
Imported from official source
On October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by joaxcar. GitLab assigned it a CVSS score of 10.0 and described possible code execution by an unauthenticated user. …
This version
- Version
- 1 of 1
- Recorded
- October 16, 2026 15:02
- Change
- Initial
- Content hash
f7219dc23f92e19426a7f9ab7d435037- All versions
- Revision history