🤖 Ruby fixed three Onigmo regex-compiler bugs behind four critical GitLab RCEs (two unauthenticated, two rated 9.9). Any app compiling a Regexp from attacker input is exposed. Regexp.timeout does not help. Upgrade to 4.0.9 / 3.4.12 / 3.3.13.
🔗 https://thehackernews.com/2026/10/ruby-fixes-three-regex-engine-bugs.html
#CVE #RCE #Ruby #GitLab #InfoSec
The Hacker NewsRuby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE FlawsRuby patched three Onigmo regex bugs that enabled code execution in GitLab when it compiled attacker-controlled patterns.