{"type":"bundle","id":"bundle--3c266b13-6f02-5611-ad3a-9826d447ea47","objects":[{"type":"campaign","spec_version":"2.1","id":"campaign--4bc90ed5-dd69-5a1c-b9ad-ce6f1ebe2266","created":"2026-10-13T02:50:38.769Z","modified":"2026-10-13T02:50:38.769Z","name":"GitLab critical patch: no-login code execution on self-managed servers (CVE-2026-97229)","description":"GitLab shipped an out-of-band critical patch release on 2026-10-12 (19.4.2, 19.3.5, 19.2.8) for CVE-2026-97229, an integer overflow in the CI/CD regular expression compiler. GitLab says a specially crafted regular expression in a CI/CD configuration could let an unauthenticated user execute arbitrary code on the GitLab server, rated CVSS 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). Affected: GitLab CE/EE 19.2 before 19.2.8, 19.3 before 19.3.5, 19.4 before 19.4.2. GitLab.com is already patched; GitLab Dedicated needs no action. The same release fixes 23 other issues, five rated high, and the bug-fix list adds Ruby regexp program size and repeat-range double-free patches for Ruby 3.3 and 3.4. Not on CISA KEV at publish time and GitLab reports no exploitation.","aliases":["CVE-2026-97229","Integer Overflow issue in CI/CD Regular Expression Compiler impacts GitLab CE/EE","Integer Overflow or Wraparound in GitLab","GitLab Critical Patch Release 19.4.2 19.3.5 19.2.8"],"first_seen":"2026-10-13T01:05:46.166Z","last_seen":"2026-10-13T02:17:00.840Z","objective":"Defensive public threat-intelligence record; see limitations and source references.","external_references":[{"source_name":"GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8","url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"},{"source_name":"CVE-2026-97229 record (CVE List V5)","url":"https://www.cve.org/CVERecord?id=CVE-2026-97229"},{"source_name":"NVD CVE-2026-97229","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97229"},{"source_name":"HOL Guard operator write-up","url":"https://hol.org/blog/cve-2026-97229-gitlab-ci-regex-unauthenticated-rce"}]}]}