Firetruck

CVE-2026-97229

KEV
Updated Oct 30, 2026 · PUBLISHED
View KEV entry →

Description

GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
GitLabGitLab / GitLab>= 19.2, < 19.2.8affected
GitLabGitLab / GitLab>= 19.3, < 19.3.5affected
GitLabGitLab / GitLab>= 19.4, < 19.4.2affected