cvegitlabgitlab-ce
BREAKING: GitLab critical patch fixes no-login code execution on self-managed servers (CVE-2026-97229)
How to fix CVE-2026-97229: upgrade GitLab to 19.4.2, 19.3.5 or 19.2.8. A crafted regex in CI/CD config could run code on a self-managed GitLab server with no login. GitLab.com is already patched.