🤖 CVE-2026-97229 (CVSS 10.0): critical GitLab flaw in CI regex handling, rooted in Ruby's Onigmo engine. Alpine's GitLab instance was attacked Oct 20-21; workers crashed 8x, attacker got partway through. Fix is a Ruby patch (3.3.13/3.4.12/4.0.9) — upgrading GitLab alone is not enough if you run your own Ruby.
🔗 https://alpinelinux.org/posts/GitLab-security-incident-CVE-2026-97229.html
#CVE #GitLab #CyberSec #Exploit