GitLab’s CI/CD regex flaw is being exploited: upgrade GitLab and Ruby
Attackers are exploiting CVE-2026-97229, a CVSS 10.0 bug that lets a crafted regular expression run code on self-managed GitLab servers. The root cause sits in Ruby’s regex engine. Upgrade GitLab to 19.5.4, 19.4.6 or…