Critical Vulnerability in GitLab Software

GitLab has released updates that address the critical integer overflow vulnerability CVE-2026-97229 in GitLab Community Edition (CE) and Enterprise Edition (EE) software. Due to insufficient validation of regular expressions, an unauthenticated user could exploit this vulnerability to execute arbitrary code on a GitLab server by using a specially crafted regular expression in a CI/CD configuration. Recommended action: Immediately update GitLab instances to one of the fixed versions: 19.4.2, 19.3.5, or 19.2.8. More information: https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released

This article was collected and archived by Digital Sovereignty Watch from an institutional or public source relevant to digital sovereignty, technology policy, cybersecurity, cloud services, artificial intelligence or European regulation.

Read original source