Vulnerability
Published 2026-10-29 New
Verified 2026-10-24

GitLab Community Edition and Enterprise Edition (CVE-2026-97229)

GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability. GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation. Apply vendor mitigations.

Check the NVD record and the vendor advisory for affected versions and the patch.

Product
GitLab Community Edition and Enterprise Edition
Exploited in Australia?
unknown

vulnerabilities