Threats tagged 'ghsa-83vq-rvff-66gw'

A critical vulnerability (CVE-2026-110264) affects GitLab CE/EE versions from 7.0 up to but not including several fixed releases before 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3, and 19.5.1. This flaw allows an unauthenticated attacker to execute arbitrary code on the GitLab server by exploiting an integer overflow during the compilation of a specially crafted regular expression.