Vendor hub
GitLab Community and Enterprise Edition.
Integer overflow in Ruby's Onigmo regex engine lets crafted GitLab CI/CD regexes run code on the server. CVSS 10.0, public PoC, in CISA KEV.
Updated 2026-11-09
| CVE | Product | Added to KEV | Status | Dossier |
|---|---|---|---|---|
| CVE-2026-97229 | GitLab Community Edition and Enterprise Edition | 2026-10-29 | Active exploitation | Read → |
| CVE-2026-85706 | GitLab Community Edition and Enterprise Edition | 2026-09-11 | Active exploitation | Planned |
| CVE-2021-22175 | GitLab | 2026-02-18 | Active exploitation | Planned |
| CVE-2021-39935 | GitLab Community and Enterprise Editions | 2026-02-03 | Active exploitation | Planned |
| CVE-2023-7028 | GitLab CE/EE | 2024-05-01 | Active exploitation | Planned |
| CVE-2021-22205 | GitLab Community and Enterprise Editions | 2021-11-03 | Active exploitation | Planned |