news.mlab.sh
Back to the feed
vulnerability

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

1d ago · The Hacker News · [email protected] (The Hacker News)
CriticalCVSS 10.0KEVEPSS 93%
Image: The Hacker News
Summary

GitLab has released patches for a critical security flaw (CVE-2026-97229) in its Community and Enterprise Editions, allowing unauthenticated users to execute arbitrary code via a crafted regular expression. Patches are available for specific versions.

Read the full article at The Hacker News

Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data

Also covered by 1 other source(s)

Report an error
Confirmed errors are fixed and listed on /corrections.