CVE-2026-97229CRITICAL
CVE-2026-97229: GitLab CE/EE CI/CD regex integer overflow leading to remote code execution
Integer overflow in Ruby's Onigmo regex engine lets crafted GitLab CI/CD regexes run code on the server. CVSS 10.0, public PoC, in CISA KEV.
Updated 2026-11-09