Vulnerability
Published 2026-10-29 New
Verified 2026-10-24
GitLab Community Edition and Enterprise Edition (CVE-2026-97229)
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability. GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation. Apply vendor mitigations.
Check the NVD record and the vendor advisory for affected versions and the patch.
- Product
- GitLab Community Edition and Enterprise Edition
- Exploited in Australia?
- unknown
- Primary: NVD
- Vendor: CISA KEV
- CVE: CVE-2026-97229
