Follow the latest coverage, related explainers and connected technology stories.
GitLab warned of a critical vulnerability, tracked as CVE-2026-97229, in the regular expression compiler within CI/CD that could allow an unauthenticated attacker to execute arbitrary code on the server using a specially crafted expression. Users of self-hosted versions should update immediately to the patched releases.