vulnerability
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
HighCVSS 10.0
Summary
A vulnerability in Ruby's regular expression engine (Onigmo) has been patched, but applications relying on older versions (3.2 and earlier) remain at risk. These flaws stem from the ability to corrupt memory during regular expression compilation when using untrusted input, and GitLab has published detection rules for self-managed instances.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data