GitLab

GitLab security incident: attempted exploitation of CVE-2026-97229

Alpine Linux reports that on October 20-21 an attacker tried to exploit CVE-2026-97229, a CVSS 10.0 flaw in Ruby's Onigmo regex engine reachable via GitLab CI config, on its GitLab instance. Upgrading GitLab did not help because the fix ships as a Ruby patch only in official GitLab packages. No compromise was found, but the instance was rebuilt, passwords reset, and aports, packages and releases verified untampered.

Announcement · Security · Linux · Incident Response · GitLab