Threats tagged 'ghsa-9chr-4x58-948m'

A critical vulnerability (CVE-2026-89078) in GitLab CE/EE versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 could allow an authenticated user to execute arbitrary code on the GitLab server. The issue arises from a double free error when parsing a specially crafted regular expression in a CI/CD configuration. GitLab has remediated this vulnerability in versions 19.2.7, 19.3.3, and 19.4.1.

A critical integer overflow vulnerability in GitLab CE/EE versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 could allow an authenticated user to execute arbitrary code on the server. The flaw occurs when compiling a specially crafted regular expression in a CI/CD configuration. GitLab has released patches to remediate this issue.