Threats tagged 'bit-gitlab-2026-97229'

GitLab CE/EE versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 contain an integer overflow or wraparound vulnerability. This flaw allows an unauthenticated user to execute arbitrary code on the GitLab server by leveraging a specially crafted regular expression in a CI/CD configuration due to insufficient validation. The issue has been remediated in versions 19.2.8, 19.3.5, and 19.4.2.