CVE-2026-97229

The record

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.

Affected packages

Related vulnerabilities

• CVE-2026-108324 Tanium addressed a denial of service vulnerability in Tanium Client. CWE-190
• CVE-2026-121219 Integer overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker… CWE-190
• CVE-2026-121382 A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. CWE-190
• CVE-2026-120954 A weakness in the BSON library's handling of a specialized binary vector data type allows… CWE-190
• CVE-2026-63418 Monitoring Plugins is a suite of plugins for monitoring applications. CWE-190
• CVE-2026-121259 A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. CWE-190
• CVE-2026-40659 An integer overflow condition in the AMD Compressonator SDK could allow an attacker with… CWE-190
• CVE-2026-100493 An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an… CWE-190