Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

GitLab security patch release for CVE-2026-97229

Security Patch Release
First reported
Last updated
Happening score
H score 37
1 unique sources, 1 articles

Summary

Hide ▲

GitLab released security fixes for GitLab CE/EE after disclosing CVE-2026-97229, and self-managed installations were told to upgrade immediately to stop possible unauthenticated code execution on targeted servers. The patch covers affected builds before 19.2.8, 19.3.4, and 19.4.2.

Related Happenings

GitLab Self-Hosted AI Gateway immediate update advisory (CVE-2026-90970)

Advisory/Mitigation
H score41 First: 02.10.2026 19:20 Last: 02.10.2026 19:20 Sources 1

About this happening: GitLab issued immediate update guidance for GitLab Self-Managed customers running Self-Hosted AI Gateway after fixing CVE-2026-90970, a flaw that could allow arb...

Open Happening

GitLab security patch release for CVE-2026-90970

Security Patch Release
H score41 First: 02.10.2026 19:20 Last: 02.10.2026 19:20 Sources 1

About this happening: GitLab released 19.2.4, 19.3.2, and 19.4.1 to fix CVE-2026-90970 in GitLab Self-Hosted AI Gateway, closing a critical command-execution path for vulnerable...

Open Happening

GitLab CE/EE security update for CVE-2026-85706

Security Patch Release
H score44 First: 14.09.2026 10:06 Last: 14.09.2026 10:06 Sources 1

About this happening: GitLab released CE/EE fixes for CVE-2026-85706, and users were urged to patch immediately to close a repository commits API flaw that can expose credentials and se...

Open Happening

GitLab CE/EE security patch release (CVE-2023-2825, CVE-2026-87719)

Security Patch Release
H score45 First: 11.09.2026 14:15 Last: 11.09.2026 14:15 Sources 1

About this happening: GitLab released fixes for CVE-2023-2825 and CVE-2026-87719 in GitLab Community Edition (CE) and Enterprise Edition (EE), requiring self-managed installations...

Open Happening

GitLab self-managed installations immediate upgrade advisory

Advisory/Mitigation
H score45 First: 11.09.2026 14:15 Last: 11.09.2026 14:15 Sources 1

About this happening: GitLab issued immediate upgrade guidance for self-managed GitLab installations after fixing two security issues in GitLab CE and GitLab EE. Operators were told...

Open Happening

Timeline

  1. 12.10.2026 16:09 1 articles · 2h ago

    GitLab warns of maximum-severity code execution flaw in CI/CD Regular Expression Compiler

    Initial Disclosure

    GitLab warned self-managed GitLab operators to immediately patch CVE-2026-97229, a maximum-severity flaw in the CI/CD Regular Expression Compiler that could let unauthenticated remote attackers run arbitrary code on targeted GitLab servers through a specially crafted regular expression in CI/CD configuration files; the issue was discovered by a researcher using the joaxcar handle and reported through HackerOne.

    Show sources
    Open in new tab
  2. 12.10.2026 16:09 2 articles · 2h ago

    GitLab remediates CVE-2026-97229 in supported CE/EE release lines

    Mitigation Patch Update

    GitLab remediated CVE-2026-97229 in GitLab Community Edition (CE) and Enterprise Edition (EE) releases before 19.2.8, 19.3.4, and 19.4.2, and told all self-managed GitLab installations to upgrade immediately; GitLab.com is already running the patched version and GitLab Dedicated customers do not need to take action.

    Show sources
    Open in new tab