What matters in AI.

Subscribe

Security

GitLab removes a 10.0 vulnerability that lets an attacker execute code

Administrators of self-managed servers must upgrade to version 19.4.2, 19.3.5, or 19.2.8 immediately.

GitLab regex flaw scores the maximum 10.0, above five others Six horizontal bars ranked by CVSS score out of 10: CVE-2026-97229 at 10.0 in red, then 8.7, 8.5, 8.2, 7.7 and 7.3 in ink. CVSS SCORE, OUT OF 10 10.0 MAX CVE-2026-97229 Remote code, no login 10.0 CVE-2026-92883 Script in other users’ browsers 8.7 CVE-2026-16301 Unauthorized pipeline run 8.5 CVE-2026-14814 Poisoned file cache 8.2 CVE-2026-81839 Pipelines in transferred project 7.7 CVE-2026-96893 Injected AI agent instructions 7.3
GitLab's Monday release fixed six flaws; the regex compiler bug scored the maximum 10.0, the others 7.3 to 8.7.

Sources

  1. GitLab patches a max-severity regex flaw alongside five high-severity bugscsoonline.com
AI MATTER · NEWS · AI MATTER · NEWS ·13 OCT2026

Posted

More in Security

All Security news