type: cve · created: 2026-10-13 · updated: 2026-10-13 · tags: [cve] · confidence: medium · severity: medium · affected_sectors: [global] · au_impact: false
Tracked as CVE-2026-97229, the critical integer-overflow issue allows "an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation".
| Attribute | Detail |
|---|---|
| CVE | CVE-2026-97229 |
| CVSS | TODO: verify |
| Vendor / product | Not stated |
| Reported | 2026-10-13 |